Rethinking risk management in times of crisis: the effect of COVID-19 on small and medium-sized enterprises in Scotland

PurposeThe Scottish economy was experiencing steady growth prior the hit of the COVID-19, with the pandemic causing the government to announce extreme lockdown measures with unprecedented impact on small and medium-sized enterprises (SMEs). Whilst some of the industry sectors in Scotland took a lighter hit, a large part of the organizations had to either adapt or completely disrupt their business. An essential aspect of their survival, risk management (RM) was among the areas requiring the most significant acceleration. This study compared the RM practices implemented by Scottish SMEs prior and after the outbreak as well as examined the attitudes of key decision-makers in the SMEs in relation to risk, including their perceived readiness for another crisis of similar significance.Design/methodology/approachAn online survey based on ISO 31000 RM guidelines was distributed to 232 Scottish SMEs. Based on the official government reports and existing knowledge on how SMEs around the world have handled crisis events within the past 20 years, the authors developed the hypothesis that crisis events significantly accelerate SMEs' RM implementation. Around 13 items were tested in relation to the hypothesis and responses were tested via two-tailed T-test to establish significant statistical difference.FindingsThe research provides insight into the current state of risk management practices implemented by Scottish SMEs. As expected, SMEs showed significant difference in their RM implementation prior and after the COVID-19 outbreak. Whilst this has been viewed as a positive, motivations, priorities and approaches in managing risk demonstrated by the SMEs is questionable with views to their sustainable long-term recovery. The study highlights the lack of confidence instilled within the SMEs that they can handle another crisis of similar significance and provides directions for further investigation and improvements with the aim of helping the SMEs prepare better to mitigate the consequences of future crisis events.Originality/valueIn academic sense, the study offers a tested universal framework and a detailed questionnaire for assessment of RM strategy, applicable to organisations of various type, size and geography. Several implications with regards to managerial practices have been highlighted, including the neglect of the SMEs’ own internal environments and its significance in their risk strategies, the predominantly reactive approach to RM displayed by most Scottish SMEs as well as the neglect of compliance risk leading to potential quality and customer satisfaction issues preventing SMEs from full post-crisis recovery.