Policy Implications for Improving Operational Risk Management of Commercial Banks: A Case Study in Vietnam

Phan  Dien Vy; Phan  Thanh Tam

doi:10.48161/qaj.v6n1a2067

Authors

Phan Dien Vy Faculty of Postgraduate Studies, Ho Chi Minh University of Banking (HUB), Ho Chi Minh City 84, Vietnam;
Phan Thanh Tam Faculty of Postgraduate Studies, Lac Hong University (LHU), Dong Nai Province 84, Vietnam.

DOI:

https://doi.org/10.48161/qaj.v6n1a2067

Keywords:

risk management, technology, digital transformation, policy, management sciences.

Abstract

This study investigates the impact of organizational factors and digital transformation on operational risk management (ORM) in Vietnamese commercial banks. Employing a mixed-methods approach, qualitative interviews with 25 senior risk experts helped refine measurement scales, followed by a large-scale quantitative survey with 958 valid responses. Structural equation modeling (SEM) reveals that the internal environment is the most influential driver of ORM, while the awareness and operation of the ERM framework (AOF) play a critical mediating role. Results emphasize that effective ORM requires a strong risk-aware culture, integrated digital systems, and clear risk communication. The study contributes theoretically by demonstrating a dual-channel mechanism, direct and mediated, through which organizational and technological factors shape ORM effectiveness. Practically, the findings highlight that sustainable ORM requires fostering a risk-aware culture, enhancing communication, aligning technology with ERM frameworks, and integrating risk management into strategic objectives. Policy recommendations emphasize the importance of leadership commitment, ethical governance, and systematic training to strengthen the internal environment and institutionalize ERM maturity, thereby enabling Vietnamese banks to build resilience and competitiveness in an increasingly digitalized financial landscape. Finally, enhancing leadership accountability, strengthening risk culture, and embedding ERM into daily operations and strategy.

Downloads

Download data is not yet available.

References

Abdulla, H., & Elshandidy, T. (2023). Do governance factors affect the effectiveness of risk management disclosure in UAE banks? Cogent Business & Management, 10(2), 1–28.

Elshandidy, T., Elmassri, M., & Elsayed, M. (2022). Integrated reporting, textual risk disclosure and market value. Corporate Governance the International Journal of Business in Society, 22(1), 173–193.

Bitar, M., Naceur, S. B., Ayadi, R., & Walker, T. (2020). Basel compliance and financial stability: Evidence from Islamic banks. Journal of Financial Services Research, 60(1), 1–54.

Elamer, A. A., Ntim, C. G., & Abdou, H. A. (2020). Islamic governance, national governance, and bank risk management and disclosure in MENA countries. Business & Society, 59(5), 914–955.

Elamer, A., Ntim, C. G., Abdou, H., Zalata, A., & Elmagrhi, M. (2019). The impact of multi-layer governance on bank risk disclosure in emerging markets: The case of Middle East and North Africa. Accounting Forum, 43(2), 246–281.

Grassa, R., Moumen, N., & Hussainey, K. (2021). What drives risk disclosure in Islamic and conventional banks? An international comparison. International Journal of Finance & Economics, 26(4), 6338–6361.

Ökmen, Ö., Leijten, M., Stratton, T., Bosch-Rekveldt, M., & Bakker, H. (2024). Employee perspectives on risk management in a construction company. Journal of Risk Research, 27(3), 404–422.

Widjanarko, W., Manurung, A. H., & Machdar, N. M. (2025). Operational risk management in digital banks: Challenges and solutions. Dinasti International Journal of Economics, Finance & Amp; Accounting, 6(1), 315–324.

Cornwell, N., Bilson, C., Gepp, A., Stern, S., & Vanstone, B. J. (2022). The role of data analytics within operational risk management: A systematic review from the financial services and energy sectors. Journal of the Operational Research Society, 74(1), 374–402.

Araz, O. M., Choi, T. M., Olson, D. L., & Salman, F. S. (2020). Role of analytics for operational risk management in the era of big data. Decision Sciences, 51(6), 1320–1346.

Bouveret, A. (2019). Estimation of losses due to cyber risk for financial institutions. Journal of Operational Risk, 14(2), 1–20.

Dong, M., Nassif, A. B., & Li, B. (2019). A data-driven residential transformer overloading risk assessment method. IEEE Transactions on Power Delivery, 34(1), 387–396.

Embrechts, P., Mizgier, K. J., & Chen, X. (2018). Modeling operational risk depending on covariates: An empirical investigation. Journal of Operational Risk, 13(3), 17–46.

Groth, K. M., Denman, M. R., Darling, M. C., Jones, T. B., & Luger, G. F. (2020). Building and using dynamic risk-informed diagnosis procedures for complex system accidents. Proceedings of the Institution of Mechanical Engineers. Journal of Risk and Reliability, 234(1), 193–207.

Lacković, I. D., Kovšca, V., & Vincek, Z. L. (2020). A review of selected aspects of big data usage in banks’ risk management. Journal of Information and Organizational Sciences, 44(2), 317–330.

Virglerova, Z., Panic, M., Voza, D., & Velickovic, M. (2021). Model of business risks and their impact on operational performance of SMEs. Economic Research-Ekonomska Istraživanja, 35(1), 4047–4064.

Ferreira, S., & Dickason-Koekemoer, Z. (2019). A conceptual model of operational risk events in the banking sector. Cogent Economics & Finance, 7(1), 1–18.

Hamed, R. (2023). The role of internal control systems in ensuring financial performance sustainability. Sustainability, 15(13), 1–18.

Ellis, K. A. S., & Gené, J. M. (2015). Effect of internal controls on credit risk among listed Spanish banks. Intangible Capital, 13(1), 25–50.

Horvey, S. S. (2025). Insurers risk-taking behaviour in an emerging economy: unpacking the linear and nonlinear effects of enterprise risk management and corporate governance. Cogent Business & Management, 12(1), 1–23.

Stulz, R. M. (2015). Risk-taking and risk management by banks. Journal of Applied Corporate Finance, 27(1), 8–18.

Silva, J. R., Silva, A. F. D., & Chan, B. L. (2019). Enterprise risk management and firm value: Evidence from Brazil. Emerging Markets Finance and Trade, 55(3), 687–703.

Nocco, B. W., & Stulz, R. M. (2022). Enterprise risk management: Theory and practice. Journal of Applied Corporate Finance, 34(1), 81–94.

Lundqvist, S. A., & Vilhelmsson, A. (2018). Enterprise risk management and default risk: Evidence from the banking industry. Journal of Risk and Insurance, 85(1), 127–157.

Kalia, A., & Gill, S. (2023). Corporate governance and risk management: A systematic review and synthesis for future research. Journal of Advances in Management Research, 20(3), 409–461.

Hunjra, A. I., Hanif, M., Mehmood, R., & Nguyen, L. V. (2021). Diversification, corporate governance, regulation and bank risk-taking. Journal of Financial Reporting and Accounting, 19(1), 92–108.

Horvey, S. S., & Odei-Mensah, J. (2023). The measurements and performance of enterprise risk management: A comprehensive literature review. Journal of Risk Research, 26(7), 778–800.

Abdullah, R., Ismail, Z., & Smith, M. (2018). Audit committees’ involvement and the effects of quality in the internal audit function on corporate governance. International Journal of Auditing, 22(3), 385–403.

Al-Dmour, A., Al-Dmour, R., & Rababeh, N. (2021). The impact of knowledge management practice on digital financial innovation: The role of bank managers. VINE Journal of Information and Knowledge Management Systems, 51(3), 492–514.

Barr-Pulliam, D., Eulerich, M., & Ratzinger-Sakel, N. (2024). The effect of the internal audit function’s perceived assurance versus advisory purpose on the external auditor’s reliance decision. Managerial Auditing Journal, 39(2), 138–165.

Lim, C. Y., Woods, M., Humphrey, C., & Seow, J. L. (2017). The paradoxes of risk management in the banking sector. The British Accounting Review, 49(1), 75–90.

Elshandidy, T., Shrives, P. J., Bamber, M., & Abraham, S. (2018). Risk reporting: A review of the literature and implications for future research. Journal of Accounting Literature, 40(1), 54–82.

Tarjo, T., Vidyantha, H. V., Anggono, A., Yuliana, R., & Musyarofah, S. (2022). The effect of enterprise risk management on prevention and detection fraud in Indonesia’s local government. Cogent Economics & Finance, 10(1), 1–19.

Cohen, J., Krishnamoorthy, G., & Wright, A. (2016). Enterprise risk management and the financial reporting process: the experiences of audit committee members, CFOs, and external auditors. Contemporary Accounting Research, 34(2), 1178–1209.

Mcshane, M. (2018). Enterprise risk management: History and a design science proposal. The Journal of Risk Finance, 19(2), 137–153

Saeidi, P., Saeidi, S. P., Gutierrez, L., Streimikiene, D., Alrasheedi, M., Saeidi, S. P., & Mardani, A. (2020). The influence of enterprise risk management on firm performance with the moderating effect of intellectual capital dimensions. Economic Research-Ekonomska Istraživanja, 34(1), 122–151.

Farrell, M., & Gallagher, R. (2015). The valuation implications of enterprise risk management maturity. Journal of Risk and Insurance, 82(3), 625–657.

García, V., Marqués, A. I., & Sánchez, J. S. (2015). An insight into the experimental design for credit risk and corporate bankruptcy prediction systems. Journal of Intelligent Information Systems, 44(1), 159–189.

Siswanti, I., Riyadh, H. A., Nawangsari, L. C., Mohd Yusoff, Y., & Wibowo, M. W. (2024). The impact of digital transformation for sustainable business: the meditating role of corporate governance and financial performance. Cogent Business & Management, 11(1), 1–16.

Jardak, M. K., & Ben Hamad, S. (2022). The effect of digital transformation on firm performance: Evidence from Swedish listed companies. The Journal of Risk Finance, 23(4), 329–348.

Ahmed, S., Abd, A. N., Haque, R., Bin, S., Senathirajah, A. R., & Qazi, S. Z. (2024). Digital transformation in Malaysian manufacturing: a study of change sensing and seizing capabilities. Cogent Business & Management, 11(1), 1–28.

Giovannoni, E., Quarchioni, S., & Riccaboni, A. (2016). The role of roles in risk management change: The case of an Italian bank. European Accounting Review, 25(1), 109–129.

Oyewo, B. (2022). Enterprise risk management and sustainability of banks performance. Journal of Accounting in Emerging Economies, 12(2), 318–344.

Gao, S., Hsu, H. T., & Liu, F. C. (2025). Enterprise risk management, financial reporting and firm operations. Risks, 13(3), 1–28.

Hair, J., Anderson, R., Tatham, R., & Black, W. (2018). Multivariate data analysis. Prentice-Hall.

Akter, S., Michael, K., Uddin, M. R., McCarthy, G., & Rahman, M. (2022). Transforming business using digital innovations: The application of AI, blockchain, cloud and data analytics. Annals of Operations Research, 308(2), 7–39.

Bojesson, C., & Fundin, A. (2021). Exploring microfoundations of dynamic capabilities – Challenges, barriers and enablers of organizational change. Journal of Organizational Change Management, 34(1), 206–222.

Dixit, S., Singh, S., Dhir, S., & Dhir, S. (2021). Antecedents of strategic thinking and its impact on competitive advantage. Journal of Indian Business Research, 13(4), 437–458.

Serkbayeva, Z., Zhumabayeva, M., Kassenova, G., Karimbayeva, G., Faizulayev, A., & Kulumbetova, D. (2024). Examining the impact of fintech and other factors on banking practices: QISMUT + 3 countries. Cogent Business & Management, 11(1), 1–24.

Rakshit, B., & Bardhan, S. (2019). Bank competition and its determinants: Evidence from Indian banking. International Journal of the Economics of Business, 26(2), 283–313.

Parmankulova, I., Issakhova, P., Zhanabayeva, Z., Faizulayev, A., & Orazymbetova, K. (2022). The drivers of financial vulnerability and profitability: Evidence from conventional and Islamic banks in Islamic finance-oriented countries. Journal of Islamic Accounting and Business Research, 13(6), 902–919.

Meskovic, A., Kozarevic, E., & Avdukic, A. (2024). The influence of national and individual Islamic governance on Islamic banks’ social performance. Journal of Islamic Accounting and Business Research, 15(6), 911–941.

Kanapiyanova, K., Faizulayev, A., Ruzanov, R., Ejdys, J., Kulumbetova, D., & Elbadri, M. (2022). Does social and governmental responsibility matter for financial stability and bank profitability? Evidence from commercial and Islamic banks. Journal of Islamic Accounting and Business Research, 14(3), 451–472.

Ally, O. J., Kulindwa, Y. J., & Mataba, L. (2025). Financial technology and credit risk management: the case of non-performing loans in Tanzanian banks. Cogent Economics & Finance, 13(1), 1–19.

Wang, R., Liu, J., & Luo, H. R. (2021). Fintech development and bank risk taking in China. The European Journal of Finance, 27(4-5), 397–418.

Zhang, A., Wang, S., Liu, B., & Liu, P. (2022). How fintech impacts pre‐and post‐loan risk in Chinese commercial banks. International Journal of Finance & Economics, 27(2), 2514–2529.