Purpose: Risk management (RM) is receiving increasing academic and practitioner attention in the public sector. Despite this, there is a lack of systematization of this body of knowledge. The purpose of this paper is to analyze the state of art by examining the knowledge gaps and defining the emerging themes of RM in the public sector to guide future research agendas.Design/methodology/approach: The authors conducted a structured literature review (SLR). They analyzed 63 papers, by using Scopus database, published from 1990 to 2018. All papers were categorized and analyzed according to 11 criteria defined by the literature.Findings: Results show that there is an increasing attention to RM with a need for more effort to consolidate research knowledge. Findings also established a lack of theorization, with a limited explanatory capacity of most studies. The paper defined four main areas for future developments to increase the body of knowledge. Namely, RM and managerial systems (i.e. MCSs and performance management), integrating RM systems and the building blocks of RM that the authors identify will also play a role in helping the authors to understand the diffusion of RM within public sector organizations.Originality/value: Despite the increasing attention to RM in the public sector, more research is required. Considering RM in public sector risks to be a “black box”, this paper revealed some new insights that could help to analyze better RM in the public sector, to open the black box and to avoid a symbolic use of the RM. In fact, integration with the managerial systems and the strengthening of the building block could help to exploit the potential of RM in the public sector.

Inspite of the attention resilience receives in relation to public policy and public management, very few studies have analysed the internal mechanics of public sector organisations to see what is producing their resilience. Considering management control systems (MCSs) as the drivers of organisational change, this paper aims to explore their role as determinants of resilience in the public sector. The paper attempts to open the black box of organisational functioning focusing on one complex component. This paper adopted a qualitative approach for this longitudinal case study. This paper used a mix of primary and secondary sources in terms of direct observation, semi-structured interviews and internal document analysis. This paper used a framework drawing on Barbera et al. (2017) and management control’s constraining and facilitating concepts to explore how anticipatory and coping capacities of resilience are supported and reinforced by MCSs. Findings suggest that MCSs support adaptive behaviour and assist decision-making by providing knowledge and ready-to-use answers to cope with external shocks. However, this is found in case of the adoption of facilitating MCSs, which empower managers and employees and are based on stewardship roles. In such a context, MCSs played an essential role in shaping anticipatory and coping capacities. At the same time, financial shocks fostered the investment in MCSs, cyclically strengthening or developing new anticipatory and coping capacities. To the best of the authors’ knowledge, this paper is one of the first attempting to identify how facilitating MCSs, as a driver of organisational change, can make an organisation more resilient. It shows how resilience capacities are generated and strengthened via MCSs.

Purpose: This paper examines risk and risk management in public–private partnership and private finance initiatives (PPP/PFI). Despite growing interest in PPP/PFI, there are knowledge gaps in the literature. The authors’ aim is to analyse these knowledge gaps and define emerging themes to guide future research agendas.Design/methodology/approach: The authors conduct a systematic literature review from 1990 to 2018 using the Scopus database.Findings: The authors define six emerging themes: risk definition and types of risks; value for money (VFM) and risk; risk sharing, allocation and transfer; financial risk; contractualisation and renegotiation of risk; and risk management and governance. They proposed a conceptualisation of potential development of PPP/PFI research through the three phases of risk management cycle, i.e. prospective, real time and retrospective. This paper revealed some new aspects that could help to analyse better risk and risk management in PPP/PFI to reach value for money (VFM) and to exploit the potential of PPP/PFI.Originality/value: Despite the increasing attention to PPP/PFI, further researches are required in relation to operational and post-operational risk studies, risk management and control, the role of trust. The authors’ analysis underlines the difficulties in how risk is perceived and how to ascertain VFM. In addition, the authors highlight how the increase of contract renegotiation is changing the provisions with reference to risk assignment creating market distortion. Risk should be managed as a cycle; PPP/PFI would benefit by engaging more with the risk management literature.

While it is becoming pervasive and unavoidable in every organization, risk management (RM) interacts with control systems in public sector organizations (PSOs). This article presents a literature review showing that PSOs design and implement risk-based control systems arbitrarily. This leads to the issue of appropriate integration of RM in management accounting and control systems (MACS). Despite the importance of integrated RM, the existing literature shows that issues of RM are not well integrated at the MACS level, and that a radical cultural shift is still required in PSOs. Future RM studies must provide empirical data about integration in practice.

In recent decades, non-financial reporting has been widely debated in the literature relating to both public and private sectors. Non-financial reporting is used to increase accountability and transparency, and to adapt to external pressures and stakeholder expectations. The focus on external factors, i.e., transparency and stakeholders, has largely precluded research into the quality of non-financial reporting. Nevertheless, the quality and reliability of sustainability reports have been widely questioned in the literature. Non-financial reporting may provide purely symbolic actions to manage expectations. This paper analyzes the level of diffusion and quality of non-financial reporting tools in the public utility sector. We use the principles of the GRI (Global Reporting Initiative) framework to measure quality, i.e., clarity and accuracy, timeliness and stakeholder engagement, comparability, and reliability. We use a qualitative exploratory approach with a mix of primary and secondary sources. The results show that despite the increasing use of non-financial reporting in organizational life, it is not diffused within public utilities. We address the issue of quality, and find that, overall, the accuracy/clarity and comparability of non-financial reporting is satisfactory; timeliness and stakeholder engagement appear to be acceptable, while reliability does not appear to be acceptable.

There are various factors that can affect an organization’s ability to overcome a crisis and the uncertainties that arise thereafter. Little is known about the process of organizational resilience and the factors that can help or prevent it. In this paper, we analyzed how public sector organizations build resilience/traits of risks awareness, and in doing that, we derived some elements that could affect the process of resilience. In particular, drawing on the conceptual framework proposed by Mallak we analyzed an in-depth case study in a public sector organization (PSO) identifying some contextual dimensions implicated in the process of building resilience. In our analysis, we identified two main elements that affect resilience: Risk perception and the use of accounting. Results shown how risk perception is perceived as a trigger, while accounting is considered as an enforcer in the process of building resilience capacity. The results also show the way accounting is implicated in the management of austerity programs and supporting the creation of a resilient public sector organization. In our case, the risk has become an opportunity for change. In the face of these budget cuts, management began refocusing the company’s mission from infrastructure maintenance to providing services with a market-based logic.