Rita Lamboglia

Un modello di gestione del rischio reputazionale. Dall’identificazione al fronteggiamento

The scope of this article is the analysis of the reputation risk management process with the aim to define a conceptual model that could be applied to identify, assess and mitigate this type of risk. This model is based on the analysis of the extant literature on risk management and on corporate reputation. This analysis reveals that the measurement of the reputational risk is a controversial aspect and there are different approaches that could be used to carry out this activity. Furthermore the value of the corporate reputation may be influenced by many variables and a wide range of actions could be implemented to reduce the probability and/or the impact. However the analysis of the existing models for reputation risk management reveals noticeable differences regarding the variables and the methodology that could be used. Based on these findings, our conceptual model proposes a qualitative methodology to assess a set of reputational risk drivers. Moreover the model highlights the importance of the internal control systems and the crisis communication management for risk mitigation. Future steps include the formal validation of this model through an empirical investigation that will be carried out on a selected number of Italian companies.

The (mis)fit between the profile of internal auditors and internal audit activities

This study investigates whether there is a fit between the profile of internal auditors and the activities of the internal audit department (IAD). It also seeks to discover which type of internal auditors fit which type of internal audit (IA) activities. This is commonly referred to as the person-job (P-J) fit. Furthermore, this study investigates whether this (mis)fit is associated with the outsourcing/co-sourcing of IA activities and turnover within the IAD. Bringing strategic human resource management (SHRM) into IA can be considered as the key contribution of this paper. The results of this study are based on a questionnaire completed by 280 members of the Institute of Internal Auditors in Belgium. The results show that there is a fit between some characteristics of internal auditors working in an IAD and the activities of the IAD. The results also show that certain internal auditor characteristics fit with certain types of IA activities. However, the degree of fit varies. Furthermore, it was found that IADs that co-source/outsource were significantly more associated with a misfit between the profile of the internal auditors and the activities of the IAD, whereas a misfit was not significantly associated with a high turnover of internal auditors.

Do IT audits satisfy senior manager expectations?: A qualitative study based on Italian banks

Purpose - – This paper aims to analyse the relationship between the senior management and the information technology (IT) auditing undertaken in Italian banks, focusing specifically on the internal IT auditing. The purpose of this paper is to investigate senior executives’ expectations regarding IT auditing, the techniques IT auditors apply to meet these expectations, the degree to which senior managers are satisfied with the auditing and the expectation gap. Design/methodology/approach - – We conducted 22 interviews with senior managers and IT auditors of seven Italian banks, comprising large and small financial institutions, to gain data for our analysis. Findings - – We found that overall, the IT auditors’ contributions satisfy senior managers, even though they still see room for improvement. They expect more support for the IT governance processes, specifically for the alignment between IT investments and business needs and between IT risk management and the value that IT resources provide. In addition, they want IT auditors to focus more strongly on IT security. To meet these expectations, IT auditors would have to improve their technical and non-technical skills. These skills will allow them to expand their activities, to be more proactive and to take on effective roles in IT governance processes. Originality/value - – This study contributes to the existing literature by providing insights into the internal audit function’s evolving role and into banks’ IT audit activities. It also provides a valuable insight into senior management’s expectations regarding the role IT audit activities should play to support the profession and the banking policymakers, thus providing a better understanding of IT audit activities and improving these activities’ role.

Strategie di sostenibilità: dalle motivazioni ai sistemi di misurazione della performance

The paper aims to examine the main changes that performance measurement systems of firms have to face after the adoption of sustainability strategies. The relationship between sustainability strategies and performance measurement systems is analysed along three main dimensions: the reasons that lead to the implementation of sustainability strategies; the changes that these strategies produce within the performance measurement systems; the feedback effects that the revised performance measurement systems determine on the sustainability strategies. We adopted a qualitative research methodology analysing a single case study: ASIA Napoli S.p.A. The case study and the results have been achieved through a theoretical framework built in the first step of the research. The case study allowed to examine the role of legitimacy and reputation when a company chooses to implement sustainability strategies, and confirmed, overall, that the decision to integrate sustainability into business strategy produces changes in performance measurement systems. Our findings showed that the implementation of sustainability strategies produce some changes in the performance measurement systems with regard to the processes and the tools for information and data collection. However, tools for information processing and analysing for decision-making support are less developed. The results also suggested that the measurement of social performance represents an incentive to revise sustainability strategies.

The Relationship between CSR Communication and Corporate Reputation in the Credit Lending Process: A Qualitative Study Based on Italian Banks

The overall objective of this study is to investigate the relationship between Corporate Social Responsibility (CSR) communication efforts and corporate reputation (CR) in the context of the credit lending process of Italian banks.

IT Auditing in Italian Banks: An explanatory study

This study analyses the characteristics of IT auditing in banks. Based upon two Italian case studies, the article provides a qualitative assessment of the objectives of the IT audit, the activities performed, the stakeholders served and the critical success factors that influence the capability of IT auditing to add value. The results show that the scope of the IT auditing function has extended; nowadays senior managers expect IT auditors to support them in the evaluation of the IT system and in the assessment of IT security controls. Regarding IT auditing activities, the most commonly performed are risk assessment and information security risk assessment. Considering stakeholders, the interviewees revealed that the main stakeholders are executive managers, while the critical success factors are the characteristics of the control environment, the capacity of the IT auditor to stay in touch with the business, and behavioural skills.