A Longitudinal Study of Supply Chain Risk Management Relative to COSO’s Enterprise Risk Management Framework

Abstract

This longitudinal study used paired survey responses gathered over a two year period to identify supply
chain risk management (SCRM) strategies and to frame the findings within the context of The
Committee of Sponsoring Organizations (COSO) ERM framework. The research found an increasing
recognition of the need for ERM and SCRM, but integration of strategies, capabilities and resources is
lacking. Respondents indicated an increased use of hedging, approved supplier lists, supplier financial
analysis, supplier performance monitoring and information gathering to manage supply chain risks.
The COSO ERM framework provides a foundation for supply managers to raise awareness of the need
for SCRM, and to integrate and execute SCRM.