Kok Boon Oh – författare

This book provides an introduction to enterprise risk management. It presents a holistic view of the fundamentals right at the start that will aid the reader in understanding the concepts of risk and why they need to be analyzed to more advanced topics of strategic risk management. The author does this by adopting a widely accepted risk framework that uses financial risk as a common thread weaving through the entire enterprise risk management process to illustrate its workings. Therefore, the aim of this book is three-fold: First, it discusses the concept in a generic analytical framework of managerial decision-making. As the basic principles of risk management have been intermeshed with the generally accepted enterprise risk management framework, this implicitly warrants the discussion of the corporate environments in which risks exist, namely, the operational and financial systems. The second objective is to detail the enterprise risk management process in the context of a firm with a focus on financial risk exposure. Third, the risk management strategies are discussed; their relevance, methods and application are presented. This book also provides a framework for analyzing key financial risks and a guide for implementing risk controls in an enterprise risk management context.

The motivation for writing this book is to share our knowledge, analyses, and conclusions about cybersecurity in particular and risk management in general to raise awareness among businesses, academics, and the general public about the cyber landscape changes and challenges that are occurring with emerging threats that will affect individual and corporate information security. As a result, we believe that all stakeholders should adopt a unified, coordinated, and organized approach to addressing corporate cybersecurity challenges based on a shared paradigm. There are two levels at which this book can be read. For starters, it can be read by regular individuals with little or no risk management experience. Because of the book's non-technical style, it is appropriate for this readership. The intellectual information may appear daunting at times, but we hope the reader will not be disheartened. One of the book's most notable features is that it is organized in a logical order that guides the reader through the enterprise risk management process, beginning with an introduction to risk management fundamentals and concluding with the strategic considerations that must be made to successfully implement a cyber risk management framework. Another group of readers targeted by this book is practitioners, students, academics, and regulators. We do not anticipate that everyone in this group will agree with the book's content and views. However, we hope that the knowledge and material provided will serve as a basis for them to expand on in their work or endeavors. The book comprises ten chapters. Chapter 1 is a general introduction to the theoretical concepts of risk and constructs of enterprise risk management. Chapter 2 presents the corporate risk landscape and cyber risk in terms of the characteristics and challenges of cyber threats vis-a-vis the emerging risks thereof from the perspective of a business organization. Chapter 3 presents the idea of enterprise risk management and explains the structure and functions of enterprise risk management as they relate to cybersecurity. Chapter 4 provides the cybersecurity risk management standards, which may be used to build a cybersecurity risk management framework that is based on best practices. The cyber operational risk management process begins in Chapter 5 with the introduction of the risk identification function. Chapter 6 continues with the next step of this process by presenting the risk assessment procedures for evaluating and prioritizing cyber risks. Chapter 7 explains the activities in the third step in the ORM process of risk mitigation and provides examples of the tools and techniques for addressing risk exposures. Chapter 8 presents a critical function from an operational perspective for its role in detecting risk and continual improvement of the organization's cybersecurity processes through the reporting function. Chapter 9 discusses the crisis management steps that businesses must take to respond to and recover from a cyber incident. Chapter 10 emphasizes the essential ERM components that senior management should be aware of and cultivate to create an effective cyber risk control framework by focusing on the strategic aspects of cybersecurity risk management from a business viewpoint. This chapter proposes a cybersecurity ERM framework based on the content given in this book.

Research in this book focuses on the strategic behaviour of the State as a shareholder in businesses, and the implications it has for the other shareholder(s) and business performance. It investigates the institutional characteristics of State-linked and State-owned firms (SIEs & SOEs), in emerging markets using Vietnam as a case study with comparative analysis on China and selected ASEAN countries.In doing so, the book adopts an evidence-based approach to explain the State’s role as a shareholder in the different aspects of corporate governance, including CEO appointment, board structure and impact of State ownership on business strategy and performance. It highlights the influence of the State as a shareholder by investigating institutional factors consistent with “path dependence” theory, which postulates that the initial and underlying structure of an economy influences its performance. In addition, the book presents empirical evidence of the dynamics of corporategovernance arising from interactions between the State and other shareholders, which has not yet been addressed in the literature, and is distinctive in providing new insights from both qualitative and empirical research on how to successfully navigate the emerging market business environments from the perspective of the State as an “owner-participant”. Explaining the theoretical constructs in corporate governance in State-invested firms, empirical research methodologies, and results to draw and validate inferences, the book is comprehensive and provides a practical guide for practitioners as well as a reference for academics, undergraduate and postgraduate students. The new theoretical models proposed integrate traditional political-economic and agency theories, which also underpin tertiary business courses and academic research.

Research in this book focuses on the strategic behaviour of the State as a shareholder in businesses, and the implications it has for the other shareholder(s) and business performance. It investigates the institutional characteristics of State-linked and State-owned firms (SIEs & SOEs), in emerging markets using Vietnam as a case study with comparative analysis on China and selected ASEAN countries.In doing so, the book adopts an evidence-based approach to explain the State’s role as a shareholder in the different aspects of corporate governance, including CEO appointment, board structure and impact of State ownership on business strategy and performance. It highlights the influence of the State as a shareholder by investigating institutional factors consistent with “path dependence” theory, which postulates that the initial and underlying structure of an economy influences its performance. In addition, the book presents empirical evidence of the dynamics of corporategovernance arising from interactions between the State and other shareholders, which has not yet been addressed in the literature, and is distinctive in providing new insights from both qualitative and empirical research on how to successfully navigate the emerging market business environments from the perspective of the State as an “owner-participant”. Explaining the theoretical constructs in corporate governance in State-invested firms, empirical research methodologies, and results to draw and validate inferences, the book is comprehensive and provides a practical guide for practitioners as well as a reference for academics, undergraduate and postgraduate students. The new theoretical models proposed integrate traditional political-economic and agency theories, which also underpin tertiary business courses and academic research. 

Research in this book focuses on the strategic behaviour of the State as a shareholder in businesses, and the implications it has for the other shareholder(s) and business performance. It investigates the institutional characteristics of State-linked and State-owned firms (SIEs & SOEs), in emerging markets using Vietnam as a case study with comparative analysis on China and selected ASEAN countries.In doing so, the book adopts an evidence-based approach to explain the State’s role as a shareholder in the different aspects of corporate governance, including CEO appointment, board structure and impact of State ownership on business strategy and performance. It highlights the influence of the State as a shareholder by investigating institutional factors consistent with “path dependence” theory, which postulates that the initial and underlying structure of an economy influences its performance. In addition, the book presents empirical evidence of the dynamics of corporategovernance arising from interactions between the State and other shareholders, which has not yet been addressed in the literature, and is distinctive in providing new insights from both qualitative and empirical research on how to successfully navigate the emerging market business environments from the perspective of the State as an “owner-participant”. Explaining the theoretical constructs in corporate governance in State-invested firms, empirical research methodologies, and results to draw and validate inferences, the book is comprehensive and provides a practical guide for practitioners as well as a reference for academics, undergraduate and postgraduate students. The new theoretical models proposed integrate traditional political-economic and agency theories, which also underpin tertiary business courses and academic research.

This book presents the practice of protecting systems, networks, and programs from digital attacks, aiming to ensure the confidentiality, integrity, and availability of a firm's networks, business systems, and data. Effective cybersecurity is not just about technological solutions but also requires robust governance measures. Drawing from academic research and the authors' professional experience in governance and cybersecurity management, this book centers on cybersecurity governance at the strategic policy-making level and its implementation throughout the organization. It emphasizes that optimizing all interdependent functions is crucial for a successful corporate strategy, adopting the concept that "the whole is greater than the sum of its parts" in cybersecurity governance.The book aims to develop a holistic organizational cybersecurity governance framework (CGF) embedded within the enterprise risk management (ERM) function of the organization. It explores the connections, interdependencies, and complementarities between broader corporate governance practices and cybersecurity management.Focusing on technology, finance, and human factors as key enablers, the book details how technological devices, technology management, financial disciplines, and human interactions reinforce organizational cybersecurity. It covers the use of technology for planning and implementing information security solutions, the role of financial management in enhancing cybersecurity, and the importance of human factors in the cybersecurity process. Educational features include imparting knowledge and managerial skills essential for designing, managing, and communicating an effective CGF. This book fills a gap in the literature by providing a comprehensive, strategic, and structured approach to cybersecurity governance, addressing the interdependencies and complementarities of organizational management functions for optimal information risk control.

This book presents the practice of protecting systems, networks, and programs from digital attacks, aiming to ensure the confidentiality, integrity, and availability of a firm's networks, business systems, and data. Effective cybersecurity is not just about technological solutions but also requires robust governance measures. Drawing from academic research and the authors' professional experience in governance and cybersecurity management, this book centers on cybersecurity governance at the strategic policy-making level and its implementation throughout the organization. It emphasizes that optimizing all interdependent functions is crucial for a successful corporate strategy, adopting the concept that "e;the whole is greater than the sum of its parts"e; in cybersecurity governance.The book aims to develop a holistic organizational cybersecurity governance framework (CGF) embedded within the enterprise risk management (ERM) function of the organization. It explores the connections, interdependencies, and complementarities between broader corporate governance practices and cybersecurity management.Focusing on technology, finance, and human factors as key enablers, the book details how technological devices, technology management, financial disciplines, and human interactions reinforce organizational cybersecurity. It covers the use of technology for planning and implementing information security solutions, the role of financial management in enhancing cybersecurity, and the importance of human factors in the cybersecurity process. Educational features include imparting knowledge and managerial skills essential for designing, managing, and communicating an effective CGF. This book fills a gap in the literature by providing a comprehensive, strategic, and structured approach to cybersecurity governance, addressing the interdependencies and complementarities of organizational management functions for optimal information risk control.

This book investigates the institutional characteristics of state-linked firms in Vietnam to draw lessons for investors/MNCs targeting Vietnam and other emerging markets in the region. Vietnam and many other ASEAN countries have gone through a period of privatization and equitization of wholly controlled SOEs, with the State retaining partial ownership in many privatized businesses. This book explains the dynamic relationships between the State, BODs, shareholders, and regulators and their influence on corporate governance and SOE performance. This book differs from other publications in that it extrapolates the findings from our study to a broader context on how the defined internal mechanisms implicate the local economy and global supply chains/markets.This book investigates robust theoretical foundations, and rigorous applied empirical research underpin the role of the State in SOEs. It differs from other studies in terms of qualitative and empirical research to providethe contextual setting to elucidate how to successfully navigate emerging market business with the State as an "owner-participant." This book explains the theoretical constructs of corporate governance in SOEs, applies empirical research methodologies, and draws results to validate inferences to (1) investigate the link between the board of directors and ownership attributes and agency cost levels using Vietnamese listed firms for the period from 2006 to 2013, (2) evaluate the effectiveness of State's corporate initiatives and monitoring through its sovereign wealth fund known as the State Capital Investment Corporation (SCIC), and (3) infer and explain the motivation of the State as a shareholder.  This book takes cognizance of Vietnam's idiosyncratic institutional (using its sovereign wealth fund as an investment vehicle and management proxy), economic, regulatory, and corporate environments and the realities for developing an effective and sustainable business model, vis-à-vis the ownership structure, board of directors' composition and corporate governance, for better business performance. While the focus is on Vietnam, the content is also relevant to the role of the State in other emerging markets as a player in shaping the business strategy, model, and direction of SOEs.