1. Introduction
Moved by this need, public managers have researched (formalized) different ways and methods to determine what is useful to guarantee the objective achievements of these organizations (
Deschamps 2019;
Rana et al. 2019).
Scholars and practitioners claim that there is a need to create a linkage between risk management (RM) and performance management (PM), moving towards integrated risk management (
Bracci et al. 2020;
Palermo 2017).
RM represents a tool for public managers to use in public administration, as it is useful to increase the level of PM when integrated with the management control system (MCS) and the achievement of objectives.
Furthermore, highlighting the world of the municipality, which provides many services to various stakeholders, such as entrepreneurs, schools, local public service companies and, in general, citizens, is of particular importance when seeking to understand how to ensure its functionality (
Bolívar 2018;
Robey and Holmström 2001;
Rodrigues et al. 2012).
In the last 40 years, the influence of new public management (
Hood 1995) has changed the approach to public administration and the municipality (
Jansen 2008;
Suzuki and Avellaneda 2018;
Ter Bogt 2008). The birth of the management control system and performance management in parallel with accountability and transparency policies highlights the need to increase the knowledge of both the public and city managers (
McGuire 2006).
However, it also is evident that RM, the MCS and PM represent the tools necessary to enable public administration and municipality management. Their integration has been widely discussed (
Palermo 2017), but there is no practical evidence of the ways in which RM, MCS and PM are integrated into public organizations (
Hinna et al. 2018;
Rana et al. 2019).
From the literature review it emerged that there are few works concentrated on practical aspects concerning the implementation of RM in municipalities.
Early reflections on the introduction of RM in public organizations include
Power et al. (
2009) who question the methods of introducing RM procedures into organizational systems as well as the emulations between the various organizations of the behaviors assumed.
This paper aims to fill this void with the purpose of discussing RM and MCS in municipalities and presenting evidence from a multiple case study in the Italian context.
The first section is the literature review on the role of the municipality and RM in the public sector. In the second section, the data and method of analysis are presented, including the multiple case study approach itself.
Finally, in the last sections, a discussion of the results and final conclusions are provided.
2. Literature Review
2.1. The Role of the Municipality in the Italian Context and Risk Management
In this paragraph, the analysis of the literature on the theme of RM in the public administration and in the municipalities has been developed through the analysis of the main papers that have dealt with the theme in a systematic way.
A municipality is a public organization that provides public services to its citizens (
Grossi et al. 2016).
The Italian territory is characterized by the presence of many municipalities. In 2020, there were 7905 municipality organizations (
ISTAT 2020), many of which are of medium-small size. There are 7905 municipalities (
ISTAT 2020), but only 1.75%, or 136 municipalities, have more than 50,000 inhabitants. Approximately 0.55%, or 44 municipalities, have more than 100,000 inhabitants, and finally, only 0.11%, or 9 municipalities, have more than 300,000 inhabitants.
Meanwhile, in the Italian municipalities, new public management approaches were introduced by private world practitioners and companies to ensure the achievement of their objectives, such as an enterprise risk management framework, the ISO 31000, and the COSO framework.
The reform process of the local authorities has neglected the relationship between risk management and the management control system (
Reginato et al. 2012;
Riso and Castellini 2019). As observed by
Peta (
2016, p. 24), the actions of Italian public managers do not appear informed as to the “risk logic”.
The reform process introduces methods and instruments such as budgeting systems and financial programming, both of which are useful to translate to the managerial level. In more precise detail, the policies, programmes, financial resources, and objectives are defined at the political level (
Grossi et al. 2016;
Ziruolo 2013).
In 2012, the Italian legislature introduced a provision, Law n. 190. This introduced anti-corruption norms in the municipalities, first implementing an organic risk management process to manage the corruption risk (
D’Onza et al. 2017).
There is no law that provides how municipalities put in place their enterprise risk management strategy, and the way to implement the choice to guarantee the achievement of the objectives is free and left up to the ability of the public manager (
Peta 2016;
Reginato et al. 2012;
Riso and Castellini 2019).
The International Organization of Supreme Audit Institutions, i.e.,
INTOSAI (
2004), provides specific guidelines for the implementation of risk management in the public sector. They explain that the aim of risk management is to enable management to effectively deal with uncertainty and to evaluate risks and opportunities. This enhances the capacity to build and create value and deliver services more efficiently (
INTOSAI 2004, Gov 9130).
However, there is a lack of practical evidence about the implementation of RM in municipalities. In the literature, few studies are available, among which is
Nilsen and Olsen’s (
2005) comparative case study. It was in this study that it emerged that two municipalities that have different strategies in practice may engage in the same risk assessment procedures and behaviors, such as those associated with the assessed relationship between RM and the MCS (
Nelson and Svara 2015).
Furthermore,
Reginato et al. (
2010) examined the behaviour of public managers in Italian municipalities and affirmed that there is isomorphic behaviour found in the way in which they developed in practice the managerial instruments provided by the Legislative Decree n. 267 in 2000.
The decision-making process in municipalities is a complex process. Risk-based decisions are influenced by various “interorganizational interactions among actors and how power, control and responsibility are distributed among them” (
Boholm et al. 2012, p. 3).
Few studies in the literature, therefore, have focused on the practical implementation of risk management in municipalities. By practical implementation we mean learning procedures and techniques integrated with the management control system (
Mormul 2021).
Mormul (
2021) investigated how RM integrated into the management control system of Local Government Units, concluding that “the understanding of the essence and principles of management control system and risk management by employees is incomplete”. For these reasons, a specific focus on the topic proposed is necessary.
2.2. A Holistic Approach to Risk Management in the Public Sector
Risk management in the public sector represents a technique used to ensure the achievement of institutional objectives (
INTOSAI 2004).
Bullock et al. (
2019) offer a wide literature review about the theme of risk management in the public sector, showing the relatively limited treatment of risk thus far in the public management research literature.
Indeed, the uncertainty about RM practices and how these are developed generates various implications.
Vinnari and Skærbæk (
2014) explained how RM itself has given rise to a number of uncertainties. These uncertainties are generated by the legal aspects of the RM solution (i.e., which types of documents are considered legally valid) or the definition and operationalization of RM and the resources available for implementing and expanding an RM system.
This deficit was confirmed by
Bracci et al. (
2021) in their structured literature review about risk management in the public sector. They explained how there is “a lack of theorization, with a limited explanatory capacity of most studies, which remains descriptive” (
Bracci et al. 2021, p. 219).
Moreover, the authors suggest a research agenda for this field, concentrating attention on RM and whether it is influenced by other managerial systems.
Furthermore, various scholars affirm how the linkage between risk and performance management is in development and how there is not currently a strong relationship practiced by public organizations (
Arena et al. 2017;
Hood and Smith 2013).
Many of these considerations start with the assumption of the “managerial” approach of public management, which plays a crucial role after new public management (
Hood 1995) influences.
Bourn (
2008), in his paper, suggests increasing the presence in the public organizations of more managerial and fewer “political” appointees at the senior civil service levels to improve financial management, cost control, and risk management.
Table 1 summarizes the main literature on RM in practice in the Public Sector of recent years that observe RM practices:
In light of the gap identified and the premises set out above, this paper discusses the relationship between RM and the MCS in the selected Italian municipalities and responds to the following research questions:
- RQ1.
Is there a relationship between RM and the MCS in the Italian municipalities, and how is it developed?
- RQ2.
How is this relationship managed?
A recent study theorized the need to provide a new type of professional approach in the municipality organization. This is the “municipal risk management” formalized in municipal organizations with accounting capabilities and backgrounds. This involves the varied ways of seeing risks also as opportunities (
Mättö et al. 2021).
Todd (
1969) called on the public administration to cover the need for an RM function in municipal governments. This includes exposing their increase in assets, examining the population served, presenting the diversity of services provided, and using the public liability of the municipalities to increase the loss exposure of the same (
Todd 1969).
Finally,
Mormul (
2021) drew a first insight into how the RM is implemented and integrated with the MCS in the Polish public sector, highlighting how “the risk management and management control system in the Polish local government units is fragmented and insufficient, even if it is usually adequately documented, does not fit into the strategic management framework” (
Mormul 2021, p. 12).
3. Materials and Methods
3.1. Case Selection
Through the correct implementation of a multiple case study, we improve the reliability of this research (
Palumbo et al. 2017) and use different resources (internal and external to the organizations) that allow the triangulation of information (
Arena et al. 2006;
Denzin 1978).
This involves comparing the data presented in the different documents of the case analysed using the information provided by the interview. This offers the possibility to evaluate the coherence between these documents.
The municipalities selected were all over 50,000 inhabitants, in coherence with a choice to select municipalities with similar sizes per category and coming from different geographical areas (north/south) (
Barbera et al. 2020), which is a relevant condition according to
Anessi-Pessina et al. (
2008).
Moreover, the selection of large municipalities was because they have a more structured organization and are therefore more sensitive to innovation and problem solving, as well as creating best practices and models to follow, compared to the smallest municipalities (
Barbera et al. 2020).
The six municipalities selected were divided into three-dimensional categories: medium (two municipalities with over 50,000 inhabitants), medium-high (three municipalities between 100,000 and 500,000 inhabitants), and high (one municipality with over 500,000 inhabitants).
Moreover, even if it did not allow for the generalization of the results, many authors agree that a case study is useful when studying and presenting new study contents that have not yet been defined. This includes being able to offer detailed descriptions and a wealth of details (
Noor 2008;
Stake 1978).
3.2. Data Collection
All municipality names have been codified with an alphabet letter from “A” to “F.”
Table 2 “
Sample of Italian municipalities involved” reports the sample.
Different sources were used to improve the triangulation of information (
Denzin 1978), and these were collected in different ways:
- -
An external point of view of the municipality selected was offered through a search of the municipality’s official websites using a content analysis method; we analysed different documents, including strategic documents, contracts, public acts of the administrators or public managers (
Feeney and Brown 2017;
Karyotakis and Antonopoulos 2021).
The main document selected for the analysis is the municipal strategic document called “DUP” (Documento Unico di Programmazione). This document is where the administrator and officers collaborated to establish a multiyear strategy by considering the factors external and internal to the organization and the territory (
Del Gesso 2020).
The DUP document is provided in Italy by Law n. 118/2011 and was introduced in 2016. It represents an important tool that is used to define the strategic and operational actions for the local authority. It establishes the basis from which to implement all other accounting tools, such as a budget or performance plan (
Gori et al. 2018).
- -
An internal point of view of the municipality selected was offered through a semi-structured interview of the municipality’s public managers. We use a questionnaire consisting of both open and closed questions to allow the researcher to intercept all answers in a binary way (yes or no), thus enabling a comparison of the results and leaving space for the interviewee’s reflections by capturing their point of view.
All the data collected were reported in an electronic worksheet.
Finally, we specified that the analysis was conducted during the coronavirus/COVID-19 health emergency, and the interviews were conducted from August to December 2020.
3.3. Case Analysis
The data reported in the documents published on the institutional municipality’s website were analysed using qualitative content analysis (
Kohli et al. 2012;
Mayring 2004).
Furthermore, the analysis of the documents collected from the municipality’s website was first conducted separately by each author, who extrapolated the main information and commented on it; after this, the two sets of comments were compared to guarantee the coherence of the evaluation and to reduce subjectivity. This allowed us to obtain the information disclosed about the RM practices. The analysis pays great attention to the principal strategic document provided and published by the municipality called “Documento Unico di Programmazione” (in brief DUP).
Finally, the main result of the content analysis is reported in the synthetic tables useful to present the data collected.
In
Figure 1, we reported a flowchart of the analysis process.
Then, to collect the internal point of view of a municipality selected, we contacted it and asked who is the subject most competent in the risk management field in its organization; the respondents covered the role of general secretary, general affairs manager or a similar role.
To the respondents identified, we issued a questionnaire consisting of open and closed questions (
Reginato et al. 2010) with the aim to collect comparable information, as well as to give them the possibility to express their personal judgements and comments.
Moreover, to understand the self-evaluation about risk management awareness of the respondent, we used a five-point Likert scale, where 1 indicated lack of knowledge and 5 indicated full knowledge for the question proposed (
Palumbo et al. 2017).
4. Results
The results were presented by dividing the municipalities by category, presenting first the medium, then the medium-high, and last, the high municipalities.
Every category reported two principal points of view, specifically: external, using the information gathered through the qualitative content analysis of the DUP, and internal, using the analysis of the responses of the interviews and the point of view of the interviewees.
After every analysis, it was determined whether there was any coherence between the external and internal information.
Finally, in the last part of the analysis, a joint vision was reported, providing the results of all six municipalities.
4.1. Medium Municipalities: Cases A and B
The medium municipalities, or those in the population range of 50,000–100,000, published their information in the institutional website DUP documents in compliance with the provision of the law.
In both documents, the word “risk” was recalled only a few times, and the risks considered were “social and natural” for Municipality A and “social, natural, and corruption” for Municipality B.
Table 3, “Analysis of DUP in Municipalities A and B”, reports the principal information on risk management.
However, in the interviews, the respondents from both municipalities have similar backgrounds and experiences. Both have a master’s degree in economics and more than 20 years of working experience.
Both municipalities involve two officers in the risk management process.
Figure 2 presents the self-evaluation of the degree of knowledge about the risk management strategies for the municipalities that express a medium value for both municipalities.
Table 4 reports the information from the closed questions for both municipalities investigating the relationship between RM and MCS. Seven responses show how there is no programmed time to discuss the RM strategies and that they do not define the RM objectives, monitoring procedure, and KPIs. Moreover, there is no budget for RM activities, and the RM objectives are not reported in the DUP. Finally, there is no comparison between the administrators and managers/officers regarding the RM strategies.
All closed questions have negative responses for both municipalities.
Moreover, the respondent for Municipality A explained that his organization does not engage with an external professional for assistance when executing the RM activities due to “lack of adequate internal professionalism”.
The respondent for Municipality B said that in his organization, the RM developed is “
of embryonic level”:
Our Management Control System does not consider the organizational risks that may affect the achievement of the programmed objectives and the correct and economic management of resources.
(General Secretary, Municipality B)
4.2. Medium-High Municipalities: Cases C, D and E
The medium-high municipalities, or those in the population range of 100,000–500,000, published their information in the institutional website DUP documents in compliance with the law provision.
In the DUPs for Municipalities D and E, the word “risk” was mentioned a few times, while in Municipality C, it recurred 24 times.
Municipality D considers only “social” risk, and Municipality E considers the “social”, “financial” and “corruption” risks. Finally, Municipality C, in addition to Municipality E, considers the “natural” risk.
Table 5, “Analysis of DUP in Municipalities C, D and E”, reports the principal information about risk management.
Figure 3 presents the self-evaluation of the degree of knowledge about the RM strategies for all three municipalities. Only Municipality C self-evaluated with a maximum value, as the latter two expressed values of 1 and 2 out of 5 points, respectively.
Table 6 reports the information of the closed questions for both municipalities investigating the relationship between RM and MCS. For the medium category and for Municipalities D and E, all of the answers were negative.
In contrast, Municipality C has programmed time to define the RM strategies and to define the objectives. It also has a formal monitoring procedure and KPIs to monitor the achievement of its objectives.
However, there is not a budget for the RM activities, and the RM objectives are not reported in the DUP. There is no comparison between the administrators and managers/officers in regard to the RM strategies.
Furthermore, the respondent for Municipality C defined the risk management implemented as “
very satisfying”:
“Strategic risks that our organization assesses more carefully include all episodes of maladministration that make the organization perceived in negative terms: environmental risks, the danger of mafia infiltration, operational risks, corruption phenomena in the field of tenders and construction”.
(General Secretary, Municipality C)
4.3. High Municipality: Case F
The high municipality, or the one with a population of more than 500,000 inhabitants, published its information through the institutional website DUP document in compliance with the law provision.
In the DUP document of Municipality F, the word “risk” was recalled 33 times. The risks considered were “environmental, operational, natural, social, financial, and corruption.”
Table 7, “Analysis of DUP in Municipality F”, reports the principal information about risk management.
Municipality F presents with a self-evaluation of the degree of knowledge about risk management with a maximum value, 5 points out of 5.
In
Table 8, the information of the closed questions is reported. Municipality F does not have enough programmed time to define the RM strategies, but it defines the RM objectives and has a formal monitoring procedure (without KPI). This is to monitor the achievement of the objectives.
However, there is no budget for RM activities, and the RM objectives are not reported in the DUP. There is no comparison between administrators and managers/officers about RM strategies.
Finally, the respondent for Municipality F describes how the RM activity was developed:
“The risk management activity focuses on the assessment of the operational risk of the ISO 9001: 2015 certified processes and on the corruption risk of the operating models included in the Three-year Corruption and Transparency Prevention Plan on the basis of predefined methodology for each area”.
(Director Officer, Municipality F)
However, in the same interview, the respondent explains that there is no synergy with the colleagues assigned to the management control office.
5. Discussion
The analysis conducted permits the observation of how the three categories of municipalities analysed, i.e., medium, medium-high, and high, have different approaches to RM and its relationship with the MCS. This confirms the presence of different definitions and ways to apply RM procedures (
Bracci et al. 2021;
Bullock et al. 2019;
Vinnari and Skærbæk 2014).
Replying to a research question reported above, only in the high municipality, with over 500,000 inhabitants and therefore an articled organization, did the relationship between risk management and the management control system appear to be more integrated compared to the others.
Furthermore, the medium municipalities presented negative responses for all issues, while the medium-high municipalities reported heterogeneous responses. Only Municipality C indicated a relationship between RM and the MCS.
However, in all municipalities analysed, it appears that there are no meetings or comparisons with the administrators about the risk management strategies that the municipality undertakes.
This fact shows that there is a low level of engagement with the other parts, especially the administrators’ political part, in the risk management process, although the strategy undertaken is communicated to the whole organization.
This confirms what has already been observed by
Mormul (
2021), which describes a detachment between the RM practices implemented by public employees with respect to a strategic vision of the institution.
The absence of a budgeting process in all of the municipalities indicates a poor level of integration between risk management and the management control system.
Only the high municipality and one of the medium-high municipalities, Municipality C, defined its risk management objectives and created a procedure (Municipality C also has a set of KPIs) to monitor the associated achievements. The programming and controlling process implemented the development of objectives and KPIs to monitor the achievements (
Kaplan 2009).
Another aspect is that there is almost always coherence between the information gathered in the DUP and the information reported in the interview. The lack of attention to RM is reflected in the DUP and in the responses provided. In Municipality F, attention is given to the RM activities where the DUP and the respondents’ exposure provide the information.
Finally, the self-evaluation of the degree of knowledge of risk management strategies is generally in line with the responses provided in the interviews, with a small overestimation for the medium category.
Municipalities C and F have a good level of knowledge about RM practices and integration with MCS, so much that Municipality C is very satisfied with its RM system. Additionally, Municipality F, with an organization that is larger than that of Municipality C, would like to integrate more with MCS.
Municipality F has declared that its RM activities enhance the activities put in place for the ISO 9001 certification. This last certification regards the quality management of the services provided and the activities of the certified entity. The latest version (2015) considers the RM management activities in the quality management standard (
Chiarini 2017).
Finally, regarding the risks treated, both Municipalities C and F in their affirmations mention the corruption risk as among the risks that are managed. The same evidence emerges in the content analysis in almost all DUPs of the municipalities. The corruption of risk management in Italy is derived from the legislative obligation (Law n. 190/2012) and all public administrations submitted from this provision (
Riso and Castellini 2019).
The proposed multiple case study highlights how in the large municipalities (high and medium-high) there is a greater integration of the RM with the MCS compared to the smaller municipalities (medium).
6. Conclusions
The results confirm how risk management is embedded in municipalities (
Hinna et al. 2018).
Furthermore, the analysis shows that there is a lack of definition for RM activities and a lack of information on how every municipality independently knows what to put in place and how part of defining an RM strategy involves its relationship between MCS and PM. This confirms the deductions of
Vinnari and Skærbæk (
2014).
The results of the interviews show how medium-high and high municipalities have more advanced RM systems than smaller municipalities. The majority of Italian municipalities have a population of less than 50,000 (medium category). Out of the 7905 municipalities, only 1.75%, or 136 municipalities, have more than 50,000 inhabitants (
ISTAT 2020).
According to
Mättö et al. (
2021), a new professional figure associated with municipal risk management could be brought in to improve the RM system and its integration with the MCS; this has not yet been implemented in the Italian municipalities.
The proposed study has limitations: the small number of municipalities involved in the analysis does not permit the generalization of the observations and results reported in this study. Moreover, it could be useful to understand the degree of integration of the RM with the MCS to propose a questionnaire on a larger sample of municipalities, as proposed by
Mormul (
2021). However, this paper does offer the opportunity to investigate the practical evidence about RM in the municipalities treated and to examine the relationship between RM and MCS. Future research will be able to better investigate the quality of integration between RM and MCS by analyzing a larger sample of municipalities, and also to understand the diffusion of RM practices.
7. Managerial Implications
This study offers the possibility of observing how in the municipalities analyzed there is no alignment and sharing of objectives between the strategic part and the operational part of the Authority. From a managerial point of view, this implies that both those who manage and administer the organization must work to improve the engagement of the actors involved in the decision-making process. Furthermore, from a procedural point of view, in the absence of a regulation that dictates guidelines on implementation, the management of the Entity will have to invest in training in order to equip its organizational structure with the skills and abilities to implement and integrate processes and MRI techniques.
Author Contributions
Conceptualization, M.C. and V.R.; methodology, M.C.; investigation, V.R.; resources, V.R.; writing—original draft preparation, M.C. and V.R.; writing—review and editing, M.C. and V.R.; supervision, M.C., project administration, M.C. and V.R.; The paper’s sections can be attributed as follows:
Section 1,
Section 3,
Section 4,
Section 5 and
Section 6 to M.C.,
Section 2,
Section 3,
Section 4 and
Section 5 to V.R. All authors have read and agreed to the published version of the manuscript.
Funding
This research received no external funding.
Institutional Review Board Statement
Ethical review and approval were waived for this study due to the nature of the research and the anonymous processing of data. Participants were adult public employees who voluntarily responded to a questionnaire, which was accompanied by a letter explaining the purpose of the study and ensuring anonymity and confidentiality.
Informed Consent Statement
Informed consent was waived due to the anonymous processing of data and the voluntary nature of participation. An information letter was provided, explaining the objectives of the study and assuring participants of data confidentiality and anonymity.
Data Availability Statement
The data presented in this study are available on request from the corresponding author.
Acknowledgments
We thank the participants in the presentation of the work in the 11th EIASM Conference on Performance Measurement and Management Control for the precious comments and suggestions received.
Conflicts of Interest
The authors declare no conflict of interest.
Correction Statement
Due to an error by the Editorial Office, the Institutional Review Board Statement and Informed Consent Statement were not included in the originally published version of this article. These have now been added accordingly.
References
- Anessi-Pessina, Eugenio, Greta Nasi, and Ileana Steccolini. 2008. Accounting reforms: Determinants of local governments’ choices. Financial Accountability & Management 24: 321–42. [Google Scholar] [CrossRef]
- Arena, Marika, Michela Arnaboldi, and Giovanni Azzone. 2006. Internal audit in Italian organizations. Managerial Auditing Journal 21: 275–92. [Google Scholar] [CrossRef]
- Arena, Marika, Michela Arnaboldi, and Tommaso Palermo. 2017. The dynamics of (dis)integrated risk management: A comparative field study. Accounting, Organizations and Society 62: 65–81. [Google Scholar] [CrossRef]
- Barbera, Carmela, Enrico Guarini, and Ileana Steccolini. 2016. Italian municipalities and the fiscal crisis: Four strategies for muddling through. Financial Accountability & Management 32: 335–61. [Google Scholar] [CrossRef]
- Barbera, Carmela, Enrico Guarini, and Ileana Steccolini. 2020. How do governments cope with austerity? The roles of accounting in shaping governmental financial resilience. Accounting, Auditing & Accountability Journal 33: 529–58. [Google Scholar] [CrossRef]
- Boholm, Åsa, Hervé Corvellec, and Marianne Karlsson. 2012. The practice of risk governance: Lessons from the field. Journal of Risk Research 15: 1–20. [Google Scholar] [CrossRef]
- Bolívar, Manuel Pedro Rodríguez. 2018. Governance in smart cities: A comparison of practitioners’ perceptions and prior research. International Journal of E-Planning Research 7: 1–19. [Google Scholar] [CrossRef]
- Bourn, John. 2008. Whitehall urgently needs to reform its culture. Financial Times, May 13. [Google Scholar]
- Bracci, Enrico, Giorgia Gobbo, and Luca Papi. 2020. The integration of risk and performance management: The role of boundary objects. Journal of Public Budgeting, Accounting & Financial Management 34: 139–61. [Google Scholar] [CrossRef]
- Bracci, Enrico, Laura Maran, and Robert Inglis. 2017. Examining the process of performance measurement system design and implementation in two Italian public service organizations. Financial Accountability & Management 33: 406–21. [Google Scholar] [CrossRef]
- Bracci, Enrico, Mouhcine Tallaki, Giorgia Gobbo, and Luca Papi. 2021. Risk management in the public sector: A structured literature review. International Journal of Public Sector Management 34: 205–23. [Google Scholar] [CrossRef]
- Bromiley, Philip, Michael McShane, Anil Nair, and Elzotbek Rustambekov. 2015. Enterprise risk management: Review, critique, and research directions. Long Range Planning 48: 265–76. [Google Scholar] [CrossRef]
- Bullock, Justin B., Robert A. Greer, and Laurence J. O’Toole. 2019. Managing risks in public organizations: A conceptual foundation and research agenda. Perspectives on Public Management and Governance 2: 75–87. [Google Scholar] [CrossRef]
- Caccia, Laura, and Ileana Steccolini. 2006. Accounting change in Italian local governments: What’s beyond managerial fashion? Critical Perspectives on Accounting 17: 154–74. [Google Scholar] [CrossRef]
- Chiarini, Andrea. 2017. Risk-based thinking according to ISO 9001:2015 standard and the risk sources European manufacturing SMEs intend to manage. The TQM Journal 29: 310–23. [Google Scholar] [CrossRef]
- Chifari, Rosaria, Ansel Renner, Samuele Lo Piano, Maddalena Ripa, Sandra G. Bukkens, and Mario Giampietro. 2017. Development of a municipal solid waste management decision support tool for naples, Italy. Journal of Cleaner Production 161: 1032–43. [Google Scholar] [CrossRef]
- D’Onza, Giuseppe, Francesco Brotini, and Vincenzo Zarone. 2017. Disclosure on measures to prevent corruption risks: A study of Italian local governments. International Journal of Public Administration 40: 612–24. [Google Scholar] [CrossRef]
- Del Gesso, Carla. 2020. Eco-sustainable metropolises: An analysis of budgetary strategy in Italy’s largest municipalities. International Journal of Business Administration 11: 1. [Google Scholar] [CrossRef]
- Demasi, Francesca, Giuseppe Loprencipe, and Laura Moretti. 2018. Road Safety Analysis of Urban Roads: Case Study of an Italian Municipality. Safety 4: 58. [Google Scholar] [CrossRef]
- Demir, Tansu, and Ronald C. Nyhan. 2008. The politics-administration dichotomy: An empirical search for correspondence between theory and practice. Public Administration Review 68: 81–96. [Google Scholar] [CrossRef]
- Denzin, Norman K. 1978. The Research Act. New York: McGraw-Hill. [Google Scholar]
- Deschamps, Carl. 2019. Stages of management control in a large public organization: From top to frontline managers. Journal of Management Control 30: 153–84. [Google Scholar] [CrossRef]
- Feeney, Mary K., and Adrian Brown. 2017. Are small cities online? Content, ranking, and variation of U.S. municipal websites. Government Information Quarterly 34: 62–74. [Google Scholar] [CrossRef]
- Gori, Elena, Alberto Romolini, and Silvia Fissi. 2018. Local authorities’ policies for disseminating gender equality. Evidence from Italy. Transylvanian Review of Administrative Sciences 14: 38–53. [Google Scholar] [CrossRef]
- Grossi, Giuseppe, Cristoph Reichard, and Pasquale Ruggiero. 2016. Appropriateness and use of performance information in the budgeting process: Some experiences from German and Italian municipalities. Public Performance & Management Review 39: 581–606. [Google Scholar] [CrossRef]
- Hinna, Alessandro, Danila Scarozza, and Fabrizio Rotundi. 2018. Implementing risk management in the Italian public sector: Hybridization between old and new practices. International Journal of Public Administration 41: 110–28. [Google Scholar] [CrossRef]
- Hood, Christopher. 1995. The “new public management” in the 1980s: Variations on a theme. Accounting, Organizations and Society 20: 93–109. [Google Scholar] [CrossRef]
- Hood, John, and Tom Smith. 2013. Perceptions of quantifiable benefits of local authority risk management. International Journal of Public Sector Management 26: 309–19. [Google Scholar] [CrossRef]
- Huber, Christian, and Tobias Scheytt. 2013. The dispositif of risk management: Reconstructing risk management after the financial crisis. Management Accounting Research 24: 88–99. [Google Scholar] [CrossRef]
- INTOSAI. 2004. INTOSAI GOV 9130—Guidelines for Internal Control Standards for the Public Sector—Further Information on Entity Risk Management. Available online: www.issai.org (accessed on 1 September 2020).
- ISTAT. 2020. Codici Statistici Delle Unità Amministrative Territoriali: Comuni, Città Metropolitane, Province e Regioni. Available online: https://www.istat.it/it/archivio/6789 (accessed on 15 January 2021).
- Jansen, E. Pieter. 2008. New public management: Perspectives on performance and the use of performance information. Financial Accountability & Management 24: 169–91. [Google Scholar] [CrossRef]
- Kaplan, Robert S. 2009. Conceptual foundations of the balanced scorecard. Handbooks of Management Accounting Research 3: 1253–69. [Google Scholar] [CrossRef]
- Karyotakis, M. Minos-Athanasios, and Nikos Antonopoulos. 2021. Web communication: A content analysis of green hosting companies. Sustainability 13: 495. [Google Scholar] [CrossRef]
- Kline, J. James, and Greg Hutchins. 2017. Enterprise risk management: A global focus on standardization. Global Business and Organizational Excellence 36: 44–53. [Google Scholar] [CrossRef]
- Kohli, Shruti, Sandeep Kaur, and Gurrajan A. Singh. 2012. Website content analysis approach based on keyword similarity analysis. Paper presented at the 2012 IEEE/WIC/ACM International Conferences on Web Intelligence and Intelligent Agent Technology, Macau, China, December 4–7; pp. 254–57. [Google Scholar] [CrossRef]
- Mahama, Habib, Mohamed Elbashir, Steve Sutton, and Vicky Arnold. 2020. New development: Enabling enterprise risk management maturity in public sector organizations. Public Money & Management 42: 403–7. [Google Scholar] [CrossRef]
- Mättö, Toni, Jukka Pellinen, Kari Sippola, and Antti Rautiainen. 2021. Municipal risk managers: The beginning of a new profession. Paper presented at the 11th EIASM Conference on Performance Measurement & Management Control, Bruxelles, Belgium, September 15–17; pp. 1–6. [Google Scholar]
- Mayring, Philipp. 2004. Qualitative content analysis. A Companion to Qualitative Research 1: 159–76. [Google Scholar]
- Mazzanti, Massimiliano, and Anna Montini. 2006. The determinants of residential water demand: Empirical evidence for a panel of Italian municipalities. Applied Economics Letters 13: 107–11. [Google Scholar] [CrossRef]
- McGuire, Michael. 2006. Collaborative public management: Assessing what we know and how we know it. Public Administration Review 66: 33–43. [Google Scholar] [CrossRef]
- Mikes, Anette. 2009. Risk management and calculative cultures. Management Accounting Research 20: 18–40. [Google Scholar] [CrossRef]
- Mikes, Anette, and Robert S. Kaplan. 2014. Towards a Contingency Theory of Enterprise Risk Management. Chicago: AAA. [Google Scholar]
- Mormul, Katarzyna. 2021. Risk Management in the Management Control System in Polish Local Government Units—Assumptions and Practice. Risks 9: 92. [Google Scholar] [CrossRef]
- Mouritzen, Poul Erik, and James H. Svara. 2002. Leadership at the Apex: Politicians and Administrators in Western Local Governments. Pennsylvania: University of Pittsburgh. [Google Scholar]
- Nelson, Kimberly L., and James H. Svara. 2015. The roles of local government managers in theory and practice: A centennial perspective. Public Administration Review 75: 49–61. [Google Scholar] [CrossRef]
- Newell, Charldean, and David N. Ammons. 1987. Role emphases of city managers and other municipal executives. Public Administration Review 47: 246–53. [Google Scholar] [CrossRef]
- Nilsen, Aud Solveig, and Odd Einar Olsen. 2005. Different strategies—Equal practice? Risk assessment and management in municipalities. Risk Management 7: 37–47. [Google Scholar] [CrossRef]
- Noble, Helen, and Joanna Smith. 2015. Issues of validity and reliability in qualitative research. Evidence Based Nursing 18: 34–35. [Google Scholar] [CrossRef]
- Noor, Khairul B. Mohd. 2008. Case study: A strategic research methodology. American Journal of Applied Sciences 5: 1602–4. [Google Scholar] [CrossRef]
- Nyland, Kari, and Inger Johanne Pettersen. 2015. Hybrid controls and accountabilities in public sector management. International Journal of Public Sector Management 28: 90–104. [Google Scholar] [CrossRef]
- Paape, Leen, and Ronald F. Speklé. 2012. The adoption and design of enterprise risk management practices: An empirical study. European Accounting Review 21: 533–64. [Google Scholar] [CrossRef]
- Padovani, Emanuele, Ana N. Yetano, and Rebecca Levi Orelli. 2010. Municipal performance measurement and management in practice: Which factors matter? Public Administration Quarterly 34: 591–635. [Google Scholar]
- Palermo, Tommaso. 2017. Risk and performance management: Two sides of the same coin? In The Routledge Companion to Accounting and Risk. Edited by Margaret Woods and Philip Linsley. Abingdon: Routledge, pp. 137–49. [Google Scholar]
- Palumbo, Rocco, Carmela Annarumma, and Marco Musella. 2017. Exploring the meaningfulness of healthcare organizations: A multiple case study. International Journal of Public Sector Management 30: 503–18. [Google Scholar] [CrossRef]
- Peta, Anna. 2016. I Controlli Interni della Pubblica Amministrazione: Criticità e Prospettive Evolutive (Internal Controls in the Public Administration: Current Problems and Future Challenges). Bank of Italy Occasional Paper, No 312. Rome: Bank of Italy. [Google Scholar] [CrossRef]
- Peters, B. Guy, Jon Pierre, and Tiina Randma-Liiv. 2011. Global financial crisis, public administration and governance: Do new problems require new solutions? Public Organization Review 11: 13–27. [Google Scholar] [CrossRef]
- Power, Micheal, Tobias Scheytt, Kim Soin, and Kerstin Sahlin. 2009. Reputational risk as a logic of organizing in late modernity. Organization Studies 30: 301–24. [Google Scholar] [CrossRef]
- Rana, Tarek, Danture Wickramasinghe, and Enrico Bracci. 2019. New development: Integrating risk management in management control systems—Lessons for public sector managers. Public Money & Management 39: 148–51. [Google Scholar] [CrossRef]
- Reginato, Elisabetta, Claudia Nonnis, and Aldo Pavan. 2012. Modern public internal control systems and accountability in health care organisations. Economia Aziendale Online 2: 381–96. [Google Scholar] [CrossRef]
- Reginato, Elisabetta, Isabella Fadda, and Aldo Pavan. 2010. Italian municipalities’ NPFM reforms: An institutional theory perspective. Pecvnia: Revista de la Facultad de Ciencias Económicas y Empresariales, Universidad de León 1: 153–75. [Google Scholar] [CrossRef]
- Riso, Vincenzo, and Monia Castellini. 2019. Poor integration between operational risk management activities and internal control system in the municipalities: An analysis of the Italian legislative framework. Economia Aziendale Online 10: 149–58. [Google Scholar] [CrossRef]
- Robey, Daniel, and Jonny Holmström. 2001. Transforming municipal governance in global context: A case study of the dialectics of social change. Journal of Global Information Technology Management 4: 19–31. [Google Scholar] [CrossRef]
- Rodrigues, Miguel, Antonio F. Tavares, and J. Filipe Araújo. 2012. Municipal service delivery: The role of transaction costs in the choice between alternative governance mechanisms. Local Government Studies 38: 615–38. [Google Scholar] [CrossRef]
- Sancino, Alessandro, and Alex Turrini. 2009. The managerial work of Italian city managers: An empirical analysis. Local Government Studies 35: 475–91. [Google Scholar] [CrossRef]
- Soin, Kim, and Paul Collier. 2013. Risk and risk management in management accounting and control. Management Accounting Research 24: 82–87. [Google Scholar] [CrossRef]
- Stake, Robert E. 1978. The case study method in social inquiry. Educational Researcher 7: 5–8. [Google Scholar] [CrossRef]
- Steen, Riana, and Claudia Morsut. 2020. Resilience in crisis management at the municipal level: The synne storm in Norway. Risk, Hazards & Crisis in Public Policy 11: 35–60. [Google Scholar] [CrossRef]
- Suzuki, Kohei, and Claudia Avellaneda. 2018. New Public Management and Municipal Performance: Do NPM Reforms Boost Performance. QoG Working Paper Series; Gothenburg: QOG. [Google Scholar]
- Ter Bogt, Henk J. 2008. Management accounting change and new public management in local government: A reassessment of ambitions and results—An institutionalist approach to accounting change in the Dutch public sector. Financial Accountability & Management 24: 209–41. [Google Scholar] [CrossRef]
- Todd, Jerry D. 1969. The risk management function in municipal government. The Journal of Risk and Insurance 36: 285–95. [Google Scholar] [CrossRef]
- Vinnari, Eija, and Peter Skærbæk. 2014. The uncertainties of risk management. Accounting, Auditing & Accountability Journal 27: 489–526. [Google Scholar] [CrossRef]
- Yin, Robert K. 2011. Applications of Case Study Research. Thousand Oaks: Sage. [Google Scholar]
- Ziruolo, Andrea. 2013. Accounting and management practices in Italian local governments. In Public Sector Management in Italy. Edited by Massimo Sargiacomo. Milan: McGraw-Hill, pp. 85–118. [Google Scholar]
| Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2023 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/).