Enterprise Risk Management Culture and Implementation Challenges: Exploratory Evidence from Five African Countries

This study evaluates the enterprise risk management (ERM) culture and implementation practices within public, parastatal, and private-sector organizations in five African countries (Kenya, Tanzania, Uganda, Zambia, and Nigeria). Utilizing an exploratory, multi-country convenience survey of 35 senior organizational executives (N = 35) alongside a systematic review of corporate governance literature, the paper examines key drivers of risk culture maturity and operational effectiveness. The empirical findings reveal that while functional awareness of risk assessment is universally high (100%), formal risk management culture remains underdeveloped due to unarticulated risk philosophies, vague risk appetites, and fragmented risk communication. Furthermore, implementation effectiveness is substantially constrained by insufficient technical capacity, weak monitoring infrastructures, absent post-mitigation review mechanisms, and limited board-level sponsorship. The paper presents a structured, 5-stage strategic framework to enable African corporate and public entities to embed sustainable ERM architectures aligned with ISO 31000 and COSO standards.