Project – Enterprise Risk Management and Business Continuity of Small and Medium Enterprises: A Study of Selected SMEs in Aba South Local Government Area, Abia State

CHAPTER ONE

INTRODUCTION

1.1 Background to the Study

Small and Medium Enterprises (SMEs) constitute an important component of modern economies because of their contributions to employment generation, income creation, innovation, entrepreneurship development and local economic activities. Across emerging economies, SMEs provide opportunities for individuals to participate in productive economic activities while also serving as important channels through which goods and services reach consumers. The International Finance Corporation (IFC) reports that micro, small and medium enterprises account for more than 90% of firms globally and approximately 70% of employment on average, demonstrating their central role in economic development (International Finance Corporation [IFC], 2024). In Nigeria, the importance of SMEs is similarly substantial, as the Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) and National Bureau of Statistics (NBS) have consistently identified MSMEs as major contributors to national output and employment. The 2021 MSME survey reported that Nigerian MSMEs contributed 46.31% of national GDP and 6.21% of gross exports, underscoring the strategic importance of the sector to the Nigerian economy (SMEDAN & NBS, 2021). Consequently, the ability of SMEs to remain operational and resilient in the face of business disruptions is not only an individual organisational concern but also an issue of broader economic importance.

Despite their economic importance, SMEs operate within business environments characterised by diverse and interconnected risks. These risks may include financial risks, credit risks, market risks, operational disruptions, supply-chain problems, technological failures, employee-related risks, regulatory changes, fraud, fire outbreaks and other unforeseen events. Verbano and Venturini (2013) observed that SMEs encounter a broad range of risks but often possess fewer financial, technological and human resources with which to manage them compared with larger organisations. The limited resources of SMEs can therefore make them particularly vulnerable when unexpected events occur. In Nigeria, the situation is further complicated by challenges associated with access to finance, infrastructure and the general business environment. IFC (2022) reported an estimated unmet credit demand of approximately ₦13 trillion among Nigerian MSMEs, indicating the financial constraints under which many enterprises operate. Such constraints may reduce an SME’s capacity to establish adequate risk-management systems, maintain emergency reserves, obtain insurance, diversify suppliers or invest in technologies that support operational resilience.

Enterprise Risk Management (ERM) has emerged as a comprehensive approach through which organisations identify, assess, respond to, monitor and communicate risks in a coordinated manner. Unlike traditional risk management approaches that may address individual risks in isolation, ERM considers risks within the broader context of organisational objectives, strategy and performance. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) describes ERM as the culture, capabilities and practices integrated with strategy-setting and performance that organisations rely upon to manage risk in creating, preserving and realising value (COSO, 2017). The COSO framework emphasises governance and culture, strategy and objective-setting, performance, review and revision, and information, communication and reporting as interconnected aspects of ERM. This perspective suggests that risk management should not be treated merely as a defensive activity but should form part of the way an organisation makes decisions and pursues its objectives. For SMEs, the adoption of an appropriately scaled ERM approach could therefore provide a structured basis for anticipating threats, reducing vulnerabilities and strengthening the organisation’s ability to continue operating when disruptions occur.

The relationship between ERM and organisational survival has received increasing attention in the SME literature. Ibiwoye, Mojekwu and Dansu (2020), in their study of SMEs in Lagos State, found that ERM practices significantly influenced SME survival and recommended that SME owners should treat ERM as a valuable business function rather than an optional managerial activity. Similarly, Obademi (2021) examined risk exposure and management among SMEs in Nigeria and found that operational, credit and market risks have important implications for SME survival, while strategic management and objective-setting can contribute to risk management. These findings are important because they demonstrate that risk exposure is not merely an abstract business concern but can have direct consequences for the ability of Nigerian SMEs to remain viable. However, survival and continuity are related but not identical concepts. Survival may indicate that a business remains in existence, whereas business continuity is concerned more specifically with the organisation’s capacity to maintain or rapidly restore critical functions following disruptive events.

Business continuity has consequently become an important dimension of organisational resilience. Business Continuity Management (BCM) involves the systematic preparation of an organisation to respond to disruptive incidents and maintain or recover critical business activities. For SMEs, continuity planning may include identification of critical operations, emergency procedures, alternative suppliers, backup systems, financial contingency arrangements, communication plans, data protection measures and recovery procedures. A systematic review by Herbane et al. and subsequent literature on SME business continuity emphasise organisational preparedness, management support and the embedding of continuity practices as important attributes of effective BCM. This is particularly relevant because SMEs may be more severely affected by disruptions when they lack redundant resources, alternative operating locations, sufficient cash reserves or specialised risk personnel. Thus, business continuity should be understood as an integral component of resilience rather than merely a response mechanism activated after a crisis has occurred.

The connection between ERM and business continuity is particularly important because effective risk management can help an organisation identify potential disruptions before they materialise and establish appropriate responses in advance. ERM enables management to consider the likelihood and potential consequences of different risks, determine risk priorities and develop responses that are aligned with organisational objectives. COSO (2017) specifically emphasises the integration of risk considerations into strategy-setting and performance, implying that organisations can improve their ability to create and preserve value when risk considerations are embedded in decision-making. In practical terms, an SME that systematically identifies operational, financial, market and technological risks may be better positioned to develop contingency arrangements for those risks. For instance, an enterprise that identifies dependence on a single supplier as a significant risk can develop alternative sourcing arrangements, while a business that recognises cyber or data-loss risks can establish backup and recovery procedures. Therefore, ERM can provide an important foundation for business continuity by shifting organisational behaviour from reactive crisis management towards proactive risk preparedness.

The relevance of this relationship becomes particularly significant in Aba South Local Government Area of Abia State, where small and medium-scale businesses form part of the commercial and entrepreneurial activities of the area. Aba is widely associated with commercial activities, manufacturing, trading, fashion and garment production, footwear production, services and other forms of entrepreneurship. The concentration of business activities means that disruptions affecting individual enterprises can have implications for employees, suppliers, customers and the wider local economy. At the same time, SMEs operating within such a competitive commercial environment may face financial pressures, market fluctuations, infrastructure challenges, supply disruptions and other operational risks. Evidence from Nigerian studies already indicates that poor management of risks can undermine SME survival, while international evidence shows that SMEs frequently experience financing and capacity constraints that affect their ability to build resilience (Ibiwoye et al., 2020; IFC, 2022). It is therefore necessary to examine whether SMEs in Aba South are adequately identifying and managing the risks that threaten their ability to maintain continuous operations.

Although existing research has established a relationship between risk management and SME survival, there remains a need for location-specific evidence on how enterprise risk management contributes specifically to business continuity among SMEs. Much of the Nigerian empirical literature has concentrated on broad issues of SME survival, performance, financing and general risk exposure, while comparatively less attention has been given to the specific mechanisms through which ERM practices may support continuity of operations at the local-government level. This study therefore focuses on selected SMEs in Aba South Local Government Area of Abia State to examine the extent to which enterprise risk management practices influence business continuity. The study is premised on the view that SMEs that systematically identify risks, assess their potential effects, develop appropriate responses, monitor emerging risks and integrate risk information into managerial decisions may be better equipped to withstand disruptions and maintain essential business operations. By investigating this relationship within the specific context of Aba South, the study seeks to provide evidence that can contribute to SME management practice, risk-management policy and the broader discussion on strengthening the resilience of Nigerian SMEs.

1.2 Statement of the Problem

Small and Medium Enterprises are important contributors to employment, income generation and economic activity in Nigeria, yet many SMEs continue to operate under conditions of considerable vulnerability. The 2021 MSME survey conducted by SMEDAN and NBS demonstrated the substantial economic contribution of the sector while also highlighting persistent structural challenges affecting MSME development (SMEDAN & NBS, 2021). These challenges can become more serious when businesses encounter unexpected disruptions because smaller firms generally have fewer financial and organisational resources with which to absorb losses or sustain operations during periods of instability. IFC (2022) similarly identified a substantial financing gap among Nigerian MSMEs, illustrating one of the constraints that can limit their ability to invest in business resilience. The problem, therefore, is not simply whether SMEs face risks, but whether they have adequate systems for identifying and managing those risks before they threaten the continuity of business activities.

A further problem is that risk management practices among SMEs may often be informal, reactive or dependent heavily on the personal judgement of business owners. While some SME operators may recognise common risks such as financial losses, theft, supply interruptions and market fluctuations, recognition of a risk does not necessarily mean that systematic processes exist for assessing, documenting, monitoring and responding to it. Ibiwoye et al. (2020) found that ERM practices significantly influenced the survival of SMEs in Lagos State, suggesting that structured approaches to risk management can have important implications for the sustainability of Nigerian businesses. Obademi (2021) similarly established that operational, credit and market risks have implications for SME survival in Nigeria. The persistence of these findings raises an important concern regarding SMEs that may continue to manage risks on an ad hoc basis without comprehensive frameworks for integrating risk identification, assessment and response into everyday decision-making.

The problem also extends beyond the immediate survival of SMEs to their ability to maintain critical operations when disruptions occur. A business may survive in the long term while still experiencing significant interruptions to production, sales, customer service, supply chains, information systems or financial operations. Business continuity literature indicates that organisational preparedness, management support and embedded continuity practices are important for maintaining organisational resilience during disruptions (International Journal of Disaster Risk Reduction, 2023). However, SMEs may face particular difficulties in establishing formal continuity arrangements because of limited finance, insufficient expertise, dependence on key individuals and inadequate technological infrastructure. Without appropriate continuity planning, an otherwise viable SME may experience prolonged interruption following a major operational, financial, technological or environmental disruption.

The specific problem addressed by this study is the limited empirical evidence on the relationship between Enterprise Risk Management and Business Continuity among SMEs in Aba South Local Government Area of Abia State. While previous Nigerian studies have established that ERM and risk-management practices can influence SME survival, findings from Lagos State or studies covering Nigeria generally cannot automatically be assumed to reflect the circumstances of SMEs operating within Aba South. Ibiwoye et al. (2020) specifically recommended greater attention to ERM among Nigerian SMEs, while the broader SME literature continues to emphasise the importance of preparedness and resilience. The absence of sufficiently localised evidence creates a knowledge gap concerning whether practices such as risk identification, risk assessment, risk response and risk monitoring are associated with the ability of SMEs in Aba South to maintain uninterrupted or quickly recoverable business operations. It is this gap that the present study seeks to address.

1.3 Purpose of the Study

The general purpose of this study is to examine the relationship between Enterprise Risk Management and Business Continuity of Small and Medium Enterprises in Aba South Local Government Area of Abia State.

Specifically, the study seeks to:

1. examine the extent to which risk identification practices are adopted by selected SMEs in Aba South Local Government Area;
2. determine the influence of risk assessment practices on the business continuity of selected SMEs in Aba South Local Government Area;
3. examine the effect of risk response strategies on the business continuity of selected SMEs in Aba South Local Government Area; and
4. assess the relationship between risk monitoring practices and business continuity among selected SMEs in Aba South Local Government Area.

1.4 Research Questions

The study will be guided by the following research questions:

1. To what extent do selected SMEs in Aba South Local Government Area identify business risks?
2. To what extent does risk assessment influence the business continuity of selected SMEs in Aba South Local Government Area?
3. How do risk response strategies affect the business continuity of selected SMEs in Aba South Local Government Area?
4. What relationship exists between risk monitoring and business continuity among selected SMEs in Aba South Local Government Area?

1.5 Research Hypothesis

The following null hypothesis will be tested at a 0.05 level of significance:

H₀: Enterprise Risk Management has no significant effect on the business continuity of selected Small and Medium Enterprises in Aba South Local Government Area, Abia State.

1.6 Significance of the Study

The study will be significant to SME owners and managers because it will provide empirical information on the importance of adopting systematic approaches to identifying, assessing, responding to and monitoring business risks. The findings may help business owners understand that risk management is not limited to responding to crises after they occur but can be integrated into strategic and operational decision-making.

The study will also be useful to employees of SMEs. Effective risk management and business continuity arrangements can contribute to greater organisational stability and may reduce the likelihood of prolonged business interruptions that could affect employment. By improving preparedness for operational and financial disruptions, SMEs may be better positioned to protect their productive activities and workforce.

The study will be beneficial to government agencies and policymakers, particularly institutions concerned with SME development and entrepreneurship. Evidence generated from Aba South may assist policymakers in designing training, awareness programmes and support interventions that encourage SMEs to adopt practical risk-management and continuity strategies. This is consistent with the broader need to strengthen Nigerian MSMEs, which make a substantial contribution to the national economy (SMEDAN & NBS, 2021).

The study will also be useful to financial institutions and insurers. Better understanding of the relationship between ERM and business continuity may encourage financial institutions to consider risk-management capacity when designing SME financing and advisory products. Similarly, insurance practitioners may use the findings to improve risk-awareness programmes and develop products that respond more effectively to the needs of SMEs.

Finally, the study will contribute to the academic literature on enterprise risk management, SME resilience and business continuity. Existing Nigerian research has established a significant relationship between ERM and SME survival, particularly in Lagos State (Ibiwoye et al., 2020), but this study will extend the discussion by examining business continuity within the specific context of SMEs in Aba South Local Government Area. It may therefore provide a basis for future researchers who wish to examine SME risk management across other local governments, states or sectors in Nigeria.

1.7 Scope of the Study

The study focuses on Enterprise Risk Management and Business Continuity of Small and Medium Enterprises in Aba South Local Government Area of Abia State.

The study will focus on selected dimensions of Enterprise Risk Management, namely:

• Risk identification;
• Risk assessment;
• Risk response; and
• Risk monitoring.

The dependent variable, Business Continuity, will be examined in terms of SMEs’ ability to maintain critical operations, minimise operational disruption, recover from unexpected events and continue serving customers during and after disruptive incidents.

Geographically, the study is limited to selected SMEs operating within Aba South Local Government Area of Abia State, Nigeria. The study will not attempt to cover all SMEs in Abia State or all categories of businesses in Nigeria.

1.8 Operational Definition of Terms

Enterprise Risk Management (ERM): A coordinated organisational approach to identifying, assessing, responding to and monitoring risks in relation to business objectives, strategy and performance.

Risk Identification: The systematic process of recognising and documenting potential events or conditions that could negatively affect an SME’s objectives or operations.

Risk Assessment: The process of determining the likelihood and potential consequences of identified risks and prioritising them for appropriate management action.

Risk Response: The strategies and actions adopted by an SME to address identified risks, including avoidance, reduction, transfer or acceptance of risk.

Risk Monitoring: The continuous process of reviewing identified risks, emerging risks and the effectiveness of risk responses.

Business Continuity: The ability of an organisation to maintain or rapidly restore its critical business functions following a disruption.

Small and Medium Enterprise (SME): A business organisation operating within the small or medium enterprise category as recognised within the Nigerian SME policy and institutional context.

Business Disruption: An unexpected event or condition that interrupts normal business activities, processes, resources, services or operations.

Business Resilience: The capacity of an organisation to prepare for, withstand, adapt to and recover from disruptive events while continuing to pursue its objectives.

Project – Enterprise Risk Management and Business Continuity of Small and Medium Enterprises: A Study of Selected SMEs in Aba South Local Government Area, Abia State