内部控制与风险管理专题论文(一)

本期向大家推送发表在 Accounting, Organizations and Society 上的三篇内部控制与风险管理论文,前两篇为 LSE 的 Michael Power 教授的一般性分析,第三篇为 UIUC 的两位教授发表的一篇分析式研究论文,具体如下:


The risk management of nothing

Michael Power, London School of Economics and Political Science

Abstract: This essay challenges core elements of enterprise risk management (ERM) and suggests that an impoverished conception of ‘risk appetite’ is part of the ‘intellectual failure’ at the heart of the financial crisis. Regulators, senior management and boards must understand risk appetite more as the consequence of a dynamic organizational process involving values as much as metrics. In addition, ERM has operated as a boundary preserving model of risk management subject to the ‘logic of the audit trail’, rather than a boundary challenging practice which confronts and addresses the complex realities of interconnectedness. The security provided by ERM is at best limited to certain states of the world and at worst it is illusory – the risk management of nothing. In contrast, Business continuity management (BCM) may provide clues about how risk management might be reconstructed.

Source: Accounting, Organizations and Society 2009 34(6-7) 849–855


The apparatus of fraud risk

Michael Power, London School of Economics and Political Science

Abstract:‘Fraud risk’ is ontologically different from fraud. Fraud itself is a disruptive event; fraud risk can and must be governed. This essay draws on Foucault’s concept of an apparatus (dispositif) to explain the emergence of this difference. The analysis begins with a concrete case and explicates the history of fraud risk which flows through a specific organizational setting. First, it is claimed that fraud risk must be understood in relation to the broader historicity of risk in which risk expands its reach as an organizing practice category. Second, it is argued that the diverse elements of the fraud risk apparatus – words, laws, best practice guides, risk maps, websites, compliance officers, text books, regulatory judgments and many more – have a trajectory of formation. This trajectory begins with auditing and expands into risk management, regulation and security more generally. Fraud risk management emerges as a highly articulated, transnational web of ideas and procedures which frame the future within present organizational actions, and which intensify the responsibility of senior managers. Overall, the paper challenges the common sense idea that the present shape of fraud risk management is a functional necessity demanded by fraud events. The purpose is to display the historically contingent regime of truth for speaking about fraud, risk and responsibility in organizations. The paper suggests that this ‘regime of truth’ consists in a form of managerial and regulatory knowledge with a ‘grammar’ governing rules for talking about and acting on risky subjects and organizations. The rise of ‘fraud risk’ management and its prominent position within the field of corporate governance in the 21st century is emblematic of an ongoing neoliberal project of individualization and responsibilization.

Source: Accounting, Organizations and Society 2013 38(6-7) 525–543


Fraud dynamics and controls in organizations

Jon S. Davis, Heather L. Pesch, University of Illinois at Urbana–Champaign

Abstract: This paper develops an agent-based model to examine the emergent dynamic characteristics of fraud in organizations. In the model, individual heterogeneous agents, each of whom can have motive and opportunity to commit fraud and a pro-fraud attitude, interact with each other. This interaction provides a mechanism for cultural transmission through which attitudes regarding fraud can spread. Our benchmark analysis identifies two classes of organizations. In one class, we observe fraud tending toward a stable level. In the other class, fraud dynamics are characterized by extreme behaviors; organizations with mostly honest behavior suddenly change their state to mostly fraudulent behavior and vice versa. These changes seem to occur randomly over time. We then modify our model to examine the effects of various mechanisms thought to impact fraud in organizations. Each of these mechanisms has different impacts on the two classes of organizations in our benchmark model, with some mechanisms being more effective in organizations exhibiting stable levels of fraud and other mechanisms being more effective in organizations exhibiting unstable extreme behavior. Our analysis and results have general implications for designing programs aimed at preventing fraud and for fraud risk assessment within the audit context.

Source: Accounting, Organizations and Society 2013 38(6-7) 469–483



点击顶部“分析式会计研究”蓝色小字关注我们,或长按下图选择“识别图中二维码”关注。同时,也欢迎大家“分享到朋友圈”。