The role of enterprise risk management in enabling organisational resilience: a case study of the Swedish mining industry

Abstract

This study empirically examines the role of enterprise risk management (ERM) in developing and maintaining resilience resources and capabilities that are necessary for an organisation’s strategic transformation towards sustainability. Data was collected through 25 semi-structured interviews, one non-participant observation, and secondary sources in the context of a Swedish mining company undergoing a high-risk strategic transformation towards full decarbonisation. Following the temporal bracketing approach (Langley in Academy of Management Review 24:691–70, 1999) and employing thematic analysis (Gioia in Organizational Research Methods 16:15–31), the data was structured and analysed according to three phases from 2012 to 2023. The findings show: first, different ERM practices, such as risk governance frameworks, risk culture, risk artefacts, and risk awareness, influence resilience resources and capabilities. Second, the evolution of risk management practices from traditional risk management to ERM is an ongoing developmental process to ensure that risk management continues to be aligned with the company’s strategy. Third, in tandem with strategic changes, resilience in terms of resources and capabilities emerges over time and develops through a series of events, gradually enhancing the company’s ability to manage risks and uncertainties associated with multidimensional sustainability challenges. These results contribute to the ERM literature that follows the dynamic capability approach and also focuses on the relationship between ERM and strategy by adding more detailed empirical evidence from the risk management literature in relation to resilience resources and capabilities. Additionally, the results contribute to the resilience literature that follows a developmental perspective.