A corporate risk assessment and reporting model in emerging economies

Abstract

Purpose The growing business complexity has caused many risks (e.g. operational, financial, reputational, cybersecurity, regulatory and compliance) that threaten companies' sustainability and have received attention from regulators, investors, and businesses. The authors present a model for assessing and reporting corporate risk by examining the indicators underlying corporate risk reporting. Design/methodology/approach A thorough review of the literature and semi-structured interviews with experts were conducted and the fuzzy Delphi technique was used to obtain consensus and screening of risks. The relationships between these risk indicators were recognized, weighted and prioritized by employing a hybrid Decision Making Trial and Evaluation Laboratory Model (DEMATEL) method integrated with Analytic Network Process (ANP) (DEMATEL-ANP [DANP]) approach. Finally, using the Iranian setting of corporate risk reporting, a model was developed to calculate the risk-reporting scores. Findings The results indicate that risk disclosure quality is more important than risk disclosures' textual properties and quantity. According to the experts, reporting the key risks that the company faces, management's approach to dealing with these risks and quantifying their impact are more important than the other indicators. The results also show that risk reporting in Iran lacks quantitative and specific information, and most risk disclosures are sticky. Research limitations/implications The data have been prepared and analyzed according to the unique Iranian reporting environment, which should be considered when interpreting the results. Practical implications The results of this research can be used by the regulators of the Stock Exchange Organizations (SEO) to evaluate corporate risk reports and rank companies. Results are also relevant to investors and policymakers to identify companies with poor risk disclosure and to take necessary measures to improve their reporting practices. Social implications This paper contributes to the social and governance literature by presenting the importance of risk reporting in corporate disclosures. Originality/value The unique Iranian setting of corporate risk reporting furthers the understanding of risk reporting and thus provides education, policy, practice and research implications for other emerging economies like Iran. Many prior studies focus mainly on the quality of risk disclosure, and other aspects of corporate risk disclosure presented in the study have remained largely overlooked. The corporate risk reporting attributes identified in the study are relevant to the rise of non-financial risks, the textual and qualitative nature of risk reporting and textual risk disclosures.