Submitted:
10 November 2025
Posted:
12 November 2025
You are already at the latest version
Abstract
Keywords:
- -
- What is the level of ERM implementation in Saudi insurance companies?
- -
- What is the nature of the relationship between risk management practices and organizational sustainability?
- -
- To what extent does ERM contribute to financial solvency and operational stability?
- -
- How do governance mechanisms and risk culture influence the relationship between ERM and sustainability?
- 3.
- To assess the extent of ERM implementation in Saudi insurance companies in accordance with international frameworks, such as COSO and ISO 31000, and evaluate their alignment with local regulatory requirements set by the Saudi Central Bank
- 4.
- To analyze the realization of corporate sustainability dimensions—financial, operational, social, and environmental—in Saudi insurance companies, and explore their association with ERM practices
- 5.
- To investigate the impact of ERM on enhancing operational efficiency and financial stability of insurance companies as key indicators of corporate sustainability
- 6.
- To evaluate the mediating role of corporate governance between ERM and corporate sustainability, focusing on aspects such as oversight, transparency, accountability, and decision-making processes
- 7.
- To explore the integrative relationship among ERM, governance, and sustainability within the regulatory context of Vision 2030, contributing to the development of a national model for ERM implementation in the insurance sector.
- 8.
- To provide practical recommendations for policymakers and insurance company managers on leveraging ERM and corporate governance to achieve sustainability objectives and support Vision 2030 initiatives
- Target Population: All insurance companies operating in Saudi Arabia and registered with the Saudi Insurance Authority
- Sample: A purposive sample including executive leaders, risk managers, and financial and operational department personnel within Saudi insurance companies
- Proposed Sample Size: Between 150 and 200 respondents, ensuring adequate statistical representation
- ERM Implementation: Measuring ERM practices based on COSO (2017) framework dimensions: risk identification, risk assessment, risk response, risk monitoring, and risk communication
- Corporate Sustainability: Assessing financial and operational sustainability through indicators such as solvency, operational efficiency, premium growth, and claims stability
- Regulatory Support and Organizational Culture: Evaluating these factors as mediating variables
- Descriptive statistics (means and standard deviations) to profile the variables
| Variable Type | Variable | Description |
| independent Variable | Enterprise Risk Management (ERM) | Refers to the degree of implementation of ERM practices based on the COSO framework, which includes identifying potential events, assessing and responding to risks, and continuously monitoring the effectiveness of risk management. This variable represents the company’s capability to minimize financial, technical, and operational exposure. |
| Dependent Variable | corporate Sustainability | defined as the organization’s ability to achieve its financial, technical, and operational goals over the long term. It encompasses three key dimensions: financial sustainability (profitability and liquidity), technical sustainability (quality of underwriting and service delivery), and operational sustainability (efficiency and continuity of performance) |
| Mediating Variable | governance and Risk Culture | Refers to the effectiveness of corporate governance in overseeing risk management and the employees’ awareness and shared values regarding risks. This variable mediates the relationship between ERM implementation and sustainability outcomes, as effective governance and a strong risk culture enhance the impact of ERM on corporate sustainability. |
- -
- Identify and proactively manage potential risks before they affect operations or financial performance
- -
- Enhance operational efficiency and reduce losses from unforeseen events.
- -
- Support strategic decision-making by balancing risks and returns
- -
- Increase transparency and accountability, in line with corporate governance requirements
- -
- Enhancing Transparency and Accountability Corporate governance provides a clear framework of responsibilities within insurance companies, improving transparency and accountability among management, shareholders, and stakeholders. This reduces potential financial and operational risks and increases customer and investor confidence in the sector (Almutairi & Quttainah, 2020).
- -
- Supporting Effective Risk Management Through governance structures, committees and clear procedures are established to monitor risks and ensure that operational policies align with risk management strategies, thereby enhancing financial solvency and institutional stability of insurance companies (Soliman & Ragab, 2019).
- -
- Ensuring Regulatory Compliance Corporate governance ensures adherence to the Saudi Central Bank regulations and the Insurance Authority’s requirements, enabling companies to comply with local and international laws and reducing the likelihood of violations or penalties (Almutairi & Quttainah, 2020).
- -
- Promoting Corporate Sustainability Governance links risk management practices to the company’s long-term strategy, ensuring financial, operational, social, and environmental sustainability, in line with the objectives of Saudi Vision 2030 (Yilmaz & Flouris, 2017).
- -
- Increasing Investor and Customer Confidence Companies with effective governance achieve higher transparency and credibility, which attracts investment and strengthens customer loyalty—key factors for success in a competitive insurance market (Kamarudin et al., 2021)
- -
- Leadership Commitment: Clear support from the board of directors and executive management.
- -
- Communication and Transparency: Sharing risk-related information across all organizational levels.
- -
- Risk Awareness: Understanding potential risks and their impact on organizational objectives.
- -
- Accountability: Clear assignment of responsibilities for risk management.
- -
- Continuous Learning and Improvement: Leveraging past experiences to mitigate future risks and improve policies.
- -
- Enhances the organization’s ability to identify and proactively manage risks.
- -
- Ensures alignment between risk policies and strategic objectives.
- -
- Improves crisis response and reduces unexpected financial or operational losses.
- -
- Encouraging employees to adopt preventive practices that minimize potential losses.
- -
- Improving strategic decision-making based on a comprehensive understanding of risks.
- -
- Enhancing transparency and accountability, thereby increasing stakeholder trust.
- -
- in Saudi Arabia represent a critical sector that requires effective risk management to ensure corporate sustainability. Studies indicate that Enterprise Risk Management (ERM) serves as an integrated framework enabling firms to identify, assess, and manage financial, operational, and technical risks systematically (Ahmed & Manab, 2016).
- -
- ERM contributes to enhancing corporate sustainability by ensuring financial and operational stability, reducing volatility, improving solvency levels, and strengthening the confidence of investors and clients (Epstein & Buhovac, 2014; Al-Ghamdi, 2022).
- -
- Furthermore, corporate governance plays a pivotal role as a regulatory framework that ensures effective implementation of risk management policies and translates risk management outcomes into sustainable strategies. Research has shown that a strong governance structure strengthens the impact of ERM on sustainability, enhancing transparency and accountability (Soliman & Ragab, 2019; Almutairi & Quttainah, 2020).
- -
- In the Saudi context, Al-Ghamdi (2022) indicated that insurance companies integrating ERM with effective governance practices achieved higher levels of corporate sustainability, aligned with the objectives of Saudi Vision 2030. Local studies also emphasized that the integration of ERM and governance improves companies’ ability to face operational and financial risks and supports long-term financial and operational stability (Almutairi & Quttainah, 2020)
- ERM Implementation: Measuring ERM practices based on COSO (2017) framework dimensions: risk identification, risk assessment, risk response, risk monitoring, and risk communication
- Corporate Sustainability: Assessing financial and operational sustainability through indicators such as solvency, operational efficiency, premium growth, and claims stability
- Regulatory Support and Organizational Culture: Evaluating these factors as mediating variables
| Dimension | Frequency | Percentage (%) | Interpretation |
| Risk Identification | 85 | 85% | Most companies regularly identify risks |
| Risk Assessment | 80 | 80% | majority of companies conduct systematic risk assessment |
| Risk Response | 78 | 78% | A significant number of companies apply effective risk responses |
| Risk Monitoring | 75 | 75% | Three-quarters of companies monitor risk management strategies |
| Risk Communication | 70 | 70% | Most companies communicate risk information to management and stakeholder |
| Indicator | Frequency | Percentage (%) | Interpretation |
| Solvency | 82 | 82% | Most companies maintain adequate solvency levels as per regulatory standards |
| Operational Efficiency | 78 | 87% | companies demonstrate strong cost control and efficient operations |
| Premium Growth | 80 | 80% | premium growth indicates market confidence and financial stability |
| Claims Stability | 76 | 76% | Most companies experience steady claims patterns, reflecting operational stability |
| Dimension | Frequency | Percentage (%) | Interpretation |
| Governance Structure | 83 | 83% | Most companies have clear governance structures and active risk committees |
| Transparency and Disclosure | 79 | 79% | companies regularly disclose risk and compliance information |
| Risk Culture | 81 | 81% | Most employees demonstrate a strong awareness of ERM principles. |
| Accountability and Review | 77 | 77% | Firms conduct regular internal reviews and audits on risk management performance |
| Statistics | ||||||
| N-(Valid) | Std. Deviation | Skewness | Std. Error of Skewness | Kurtosis | Std. Error of Kurtosis | |
| Age | 150 | 1.170 | 0.830 | 0.192 | -0.307 | 0.381 |
| Gender | 150 | 0.457 | -0.914 | 0.192 | -1.179 | 0.381 |
| Educational Qualification | 150 | 1.480 | 0.824 | 0.192 | -0.906 | 0.381 |
| Risk Identification: The company regularly identifies all types of financial, operational, and strategic risks. |
150 | 1.084 | 0.031 | 0.192 | -0.149 | 0.381 |
| Risk Assessment: Risks are assessed based on their likelihood of occurrence and impact. | 150 | 1.171 | -0.947 | 0.192 | -0.018 | 0.381 |
| Risk Response: Risk responses are implemented in a timely manner after their assessment | 150 | 1.105 | -0.003 | 0.192 | -0.153 | 0.381 |
| Risk Monitoring A mechanism exists to periodically monitor and review the effectiveness of risk management. | 150 | 1.081 | 0.106 | 0.192 | -0.009 | 0.381 |
| Risk Communication Clear communication about risks and related policies is maintained across all management levels |
150 | 1.051 | -0.787 | 0.192 | -0.156 | 0.381 |
| Solvency The company has sufficient capital to cover its short-term and long-term obligations. | 150 | 1.063 | -0.147 | 0.192 | -0.021 | 0.381 |
| Operational Efficiency The company uses its resources efficiently to achieve objectives at the lowest possible cos | 150 | 1.155 | -0.926 | 0.192 | -0.264 | 0.381 |
| Premium The company records a stable or increasing growth rate in the volume of annual premiums | 150 | 1.030 | -0.136 | 0.192 | 0.212 | 0.381 |
| Claims Stability The company maintains a stable ratio of claims to premiums | 150 | 1.232 | -0.790 | 0.192 | -0.551 | 0.381 |
| Insurance claims are managed efficiently and fairly to ensure customer satisfaction | 150 | 1.067 | 0.164 | 0.192 | 0.044 | 0.381 |
| Regulatory Support The regulatory authority provides clear guidelines for implementing enterprise risk management. | 150 | 1.230 | -0.853 | 0.192 | -0.496 | 0.381 |
| The company receives technical or training support from the regulatory bodies. | 150 | 1.048 | -0.008 | 0.192 | -0.165 | 0.381 |
| Regulatory policies help enhance the stability of the insurance sector. | 150 | 1.160 | -0.940 | 0.192 | -0.006 | 0.381 |
| Organizational Culture The company’s culture encourages adherence to ethical values and accountability | 150 | 1.069 | -0.081 | 0.192 | -0.069 | 0.381 |
| Employees are motivated to adopt risk management practices. | 150 | 1.163 | -0.895 | 0.192 | -0.192 | 0.381 |
| Case Processing Summary | |||
| N | % | ||
|
Cases |
Valid | 160 | 100.0 |
| Excluded | 0 | .0 | |
| Total | 150 | 100.0 | |
| a. Listwise deletion based on all variables in the procedure | |||
| Reliability Statistics | ||
| Cronbach’s Alphaa | Cronbach’s Alpha Based on Standardized Itemsa |
N of Items |
| 0.775 | 0.771 | 19 |
| Source of Variation | Sum of Squares | df | Mean Square |
| Regression | 12.130 | 12 | 1.011 |
| Item | COSO (2017) | ISO 31000 (2018) | Saudi Central Bank requirements | Implementation Notes in Saudi Insurance Companies |
| overall Risk Management Framework | comprehensive framework integrating risk with strategy and performance | general guidelines for enterprise-wide risk management | companies must implement an integrated framework covering all types of risks | most companies implement the framework but need better integration with strategy |
| Risk Identification | focus on strategic and operational risk identification | focus on identifying risks at all organizational levels | mandatory periodic identification of financial and non-financial risks | companies often focus on financial risks; non-financial risks need better coverage |
| Risk Assessment | analyzing risks to determine impact and likelihood | quantitative and qualitative risk assessment | companies must use formal assessment methods approved by | some companies have not yet adopted standardized assessment methods, especially for emerging risks |
| Risk Treatment | strategies to address risks (avoid, transfer, mitigate, accept) | envelop integrated treatment plans with KPIs | mandatory documentation and periodic review of risk treatment strategies | companies implement treatment partially; documentation and monitoring need improvement |
| Risk Governance | involvement of board and executive management | engagement of all organizational levels | appoint a Chief Risk Officer (CRO) and a Risk Committee at board level | most companies have risk committees, but executive involvement needs strengthening |
| Reporting & Monitoring | performance monitoring and system improvement | periodic evaluation of risks and processes | mandatory submission of periodic reports to insurance authority | reporting exists but varies in detail and accuracy |
Discussion
- -
- The study results indicated that the implementation of Enterprise Risk Management (ERM) in Saudi insurance companies largely aligns with international standards (COSO and ISO 31000) and contributes to enhancing corporate sustainability by improving financial and operational performance and reducing operational risks. The results showed that companies with strong corporate governance achieve better integration between ERM and sustainability, as risk committees and boards of directors play an effective role in monitoring and guiding risk policies.
- -
- The study also highlighted some challenges in integrating international standards with the Saudi Central Bank Insurance Authority regulatory requirements, particularly regarding emerging risks and standardized reporting, indicating the need to strengthen a comprehensive risk culture across all organizational levels.
- -
- These findings are consistent with previous studies (Ahmed & Manab, 2016; Almutairi & Quttainah, 2020; Al-Ghamdi, 2022), which emphasized that ERM enhances financial solvency and operational stability, while governance acts as a mediating factor that increases the effectiveness of risk management implementation
Results
- -
- There is a significant positive effect of Enterprise Risk Management on corporate sustainability in Saudi insurance companies.
- -
- Corporate governance plays an important mediating role between ERM and sustainability; companies with effective governance structures achieve higher performance and better sustainability outcomes.
- -
- Implementing ERM according to COSO and ISO 31000 standards contributes to improving financial solvency, increasing operational efficiency, and reducing operational and financial risks.
- -
- Gaps exist in integrating international standards with insurance Authority local requirements, particularly regarding emerging risks and standardized reporting.
Recommendations
- -
- Enhance ERM Implementation: Integrate enterprise risk management into the strategy of each insurance company to ensure financial and operational sustainability.
- -
- Strengthen Corporate Governance: Enhance the role of boards of directors and risk committees in guiding and monitoring risk policies to increase ERM effectiveness.
- -
- Develop Organizational Risk Culture: Provide training programs and workshops to improve risk awareness at all organizational levels.
- -
- Standardize Reporting and KPIs: Establish unified standards for risk and sustainability reports in line with insurance Authority regulations and Vision 2030 objectives.
- -
- Continuous Research and Development: Encourage future studies to assess the impact of ERM implementation on sustainability in other financial sectors within the Kingdom.
Supplementary Materials
Funding
References
- Ahmed, I. , & Manab, N. A. (2016). The relationship between enterprise risk management (ERM) practices and firm performance: The conceptual framework. International Journal of Economics and Financial Issues, 6(3), 1000–1010.
- Florio, C. , & Leoni, G. (2017). Enterprise risk management and firm performance: The Italian case. The British Accounting Review, 49(1), 56–74. [CrossRef]
- Arena, M., Arnaboldi, M., & Azzone, G. (2018). The organizational dynamics of enterprise risk management. Accounting, Organizations and Society, 60, 13–34. [CrossRef]
- Epstein, M. J. , & Buhovac, A. R. (2014). Making sustainability work: Best practices in managing and measuring corporate social, environmental, and economic impacts (2nd ed.). Berrett-Koehler Publishers.
- Liu, X. , & Anbumozhi, V. (2020). Corporate sustainability and firm performance: Evidence from Asia. Sustainability, 12(15), 6183. [CrossRef]
- Al-Ghamdi, S. (2022). Sustainability practices in Saudi insurance companies in the context of Vision 2030. Journal of Financial Studies, 10(2), 45–61.
- Soliman, M. , & Ragab, A. (2019). Corporate governance and enterprise risk management effectiveness: Evidence from the financial sector. Corporate Governance: The International Journal of Business in Society, 19(6), 1321–1337. [CrossRef]
- Kamarudin, F. , Ahmad, R. ( 14(8), 378. [CrossRef]
- Almutairi, S. , & Quttainah, M. (2020). Governance and risk management in Saudi insurance companies. International Journal of Finance & Economics, 25(4), 554–567.
- Yilmaz, R. , & Flouris, G. (2017). Enterprise risk management, corporate governance, and sustainability: A holistic approach. Journal of Risk Research, 20(10), 1287–1305. [CrossRef]
- Mokhtar, S., & Muda, R. (2021). The mediating role of corporate governance between ERM and sustainability. Corporate Governance, 21(7), 1223–1239. [CrossRef]
- Nguyen, H. (2023). Integrated ERM and corporate governance for financial sustainability: Evidence from Asian insurance firms. Journal of Risk and Insurance, 90(1), 45–70. [CrossRef]
- Aldosari, M. (2022). Enterprise risk management and firms’ value nexus: A case of Saudi emerging market. Applied Mathematics & Information Sciences, 16(3), Article 7. [CrossRef]
- Al-Dosari, S. S. (2020). The role of governance mechanisms in improving the financial performance of insurance companies in the Kingdom of Saudi Arabia: An applied study on the Cooperative Insurance Company in Riyadh. Scientific Journal of the Faculty of Commerce Sector, Al-Azhar University, 28(1), 89–138. https://journals.ekb.eg/article_299599.
- Al-Mai, A. F. (2018). The effect of corporate governance on the financial performance of Saudi joint-stock companies: An applied study on the insurance sector in the Kingdom of Saudi Arabia. Journal of Economic, Administrative and Legal Sciences, 2(14). https://journals.ajsrp.com/index.
- Aseri, A. (2024). The influence of corporate governance on risk management: Assessing the impact of board composition and shareholding in Saudi Arabia’s insurance industry. International Journal of Science and Business, 41(1), 178–199. https://www.ijsab. 7309. [Google Scholar]
- Belgasem, E. (2025). ESG integration in Saudi insurance: Financial performance, regulatory reform, and stakeholder insights. Sustainability, 17(15), 6821. [CrossRef]
- Bounchada, N. (2017). Governance of Takaful insurance companies as a mechanism to develop the relationship between participants and shareholders: A study of the experiences of Saudi Arabia, the UAE, and Malaysia. Journal of Saleh Kamel Center for Islamic Economics, 63, 295–350.
- Boudaoud, K. (2021). The impact of risk management on improving the performance of insurance companies: A case study. Journal of Economy and Sustainable Development, 4(2), 8–20. https://asjp.cerist.
- Buraq, M. , & Qatoufi, Y. (2020). The impact of financial risks on the financial performance of Saudi Takaful insurance companies: An empirical study (2010–2018). Economic Studies Journal, 11(2), 341–357. https://asjp.cerist.
- Sharqi, M. (2022). Investment risk management in cooperative insurance companies using governance and Islamic financial engineering: A case study. Journal of Economy and Sustainable Development, 5(2), 934–954. https://asjp.cerist.
- Almutairi, S. , & Quttainah, M. (2020). Governance and risk management in Saudi insurance companies. International Journal of Finance & Economics, 25(4), 554–567.
- Al-Ghamdi, S. (2022). Sustainability practices in Saudi insurance companies in the context of Vision 2030. Journal of Financial Studies, 10(2), 45–61.
- Soliman, M. , & Ragab, A. (2019). Corporate governance and enterprise risk management effectiveness: Evidence from the financial sector. Corporate Governance: The International Journal of Business in Society, 19(6), 1321–1337. [CrossRef]
- Yilmaz, R. , & Flouris, G. (2017). Enterprise risk management, corporate governance, and sustainability: A holistic approach. Journal of Risk Research, 20(10), 1287–1305. [CrossRef]
- Kamarudin, F., Ahmad, R., & Hashim, N. (2021). Board risk committees, corporate governance, and firm sustainability. Journal of Risk and Financial Management, 14(8), 378. [CrossRef]
- Ahmed, I. , & Manab, N. A. (2016). The relationship between enterprise risk management (ERM) practices and firm performance: The conceptual framework. International Journal of Economics and Financial Issues, 6(3), 1000–1010.
- Epstein, M. J. , & Buhovac, A. R. (2014). Making sustainability work: Best practices in managing and measuring corporate social, environmental, and economic impacts (2nd ed.). Berrett-Koehler Publishers.
- Soliman, M. , & Ragab, A. (2019). Corporate governance and enterprise risk management effectiveness: Evidence from the financial sector. Corporate Governance: The International Journal of Business in Society, 19(6), 1321–1337. [CrossRef]
- COSO. (2017). Enterprise Risk Management: Integrating with Strategy and Performance. Committee of Sponsoring Organizations of the Treadway Commission.
- ISO 31000. (2018). Risk management – Guidelines. International Organization for Standardization.
- .Al-Ghamdi, S. (2022). Sustainability practices in Saudi insurance companies in the context of Vision 2030. Journal of Financial Studies, 10(2), 45–61.
- COSO. (2017). Enterprise Risk Management: Integrating with Strategy and Performance. Committee of Sponsoring Organizations of the Treadway Commission.
- ISO 31000. (2018). Risk management – Guidelines. International Organization for Standardization.
- Saudi Central Bank (SAMA). (2021). Corporate Governance and Risk Management Guidelines for Insurance Companies. Riyadh: SAMA.
- COSO. (2017). Enterprise risk management: Integrating with strategy and performance. Committee of Sponsoring Organizations of the Treadway Commission.
- Frigo, M. L. , & Anderson, R. J. (2011). Strategic risk management: A foundation for improving enterprise risk management and governance. Journal of Corporate Accounting & Finance, 22(3), 81–88. [CrossRef]
- Beasley, M. S. , Clune, R., & Hermanson, D. R. (2005). Enterprise risk management: An empirical analysis of factors associated with the extent of implementation. Journal of Accounting and Public Policy, 24(6), 521–531. [CrossRef]
- Gordon, L. A. , Loeb, M. P., & Tseng, C.-Y. (2009). Enterprise risk management and firm performance: A contingency perspective. Journal of Accounting and Public Policy, 28(4), 301–327. [CrossRef]
- Frigo, M. L. , & Anderson, R. J. (2011). Strategic risk management: A foundation for ERM. Journal of Accounting Literature, 30, 1–23.
- Almutairi, S. , & Quttainah, M. (2020). Governance and risk management in Saudi insurance companies. International Journal of Finance & Economics, 25(4), 554–567.
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2025 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (http://creativecommons.org/licenses/by/4.0/).