Frontiers in Business, Economics and Management ISSN: 2766-824X | Vol. 12, No. 2, 2023 11 Strategic Financial Risk Management: Implementing the COSO‐ERM Framework at ABC Biotech Company Lixia Song University of Illinois at Urbana-Champaign, Illinois, USA Abstract: This paper explores financial risk management through the lens of the COSO-ERM framework at ABC Biotech Company. It emphasizes the integration of risk management with corporate governance, strategy, and performance. Key aspects of the COSO-ERM framework, including Governance and Culture, Strategy and Objective Setting, Performance, and Information Communication and Reporting, are examined. The study delves into ABC Biotech's implementation of COSO-ERM, covering strategies for risk management, corporate strategy alignment, risk identification, and assessment enhancements. It underscores the importance of financial risk management as a dynamic, cyclical process aligned with strategic corporate growth, illustrating the framework's effectiveness in managing financial risks at ABC Biotech Company. Keywords: COSO-ERM; Financial Risk Management; Risk Assessment and Response. 1. Introduction In the contemporary dynamic business landscape, organizations encounter various risks that could significantly affect their stability and growth if not properly managed. To address this challenge, the Committee of Sponsoring Organizations of the Treadway Commission (COSO) has developed the Enterprise Risk Management-Integrated Framework (COSO-ERM), a comprehensive tool designed to assist enterprises in evaluating and enhancing their internal control systems. Since its inception with the "Internal Control-Integrated Framework" in 1992, the COSO-ERM framework has undergone several updates to reflect evolving business environments and management practices. In 1994, COSO expanded the original framework, adapting it to the changing business climate and evolving management methodologies. The year 2004 marked a significant shift in corporate focus towards risk management, leading to the release of the "Enterprise Risk Management-Integrated Framework" (COSO-ERM2004). This edition offered a holistic view of corporate management elements through the lens of risk management[1]. The framework received a further update in 2017 with the release of "Enterprise Risk Management-Integrating with Strategy and Performance" (COSO-ERM2017). This iteration advanced and refined the theoretical underpinnings of the framework, placing a greater emphasis on aligning corporate risk management with governance, strategy, and performance management. It introduced a series of sequential yet interconnected components, showcasing enterprise risk management as a comprehensive and integrated application of an organization’s fundamental elements. Comprising five core elements—Governance and Culture, Strategy and Objective Setting, Performance, Review and Revision, and Information Communication and Reporting— the COSO-ERM framework incorporates 20 underlying principles. These principles are designed to align with an organization’s mission, vision, and core values, integrating risk management considerations into corporate strategy formulation and management cycles. This integration aids in strategically managing enterprise development, ultimately aiming to maximize the preservation and enhancement of enterprise value. The COSO-ERM framework serves as a vital guide in financial risk management, enabling organizations to effectively navigate risks in an ever-changing market and facilitating sustainable development. This framework offers a structured approach for organizations to effectively manage risks in a rapidly changing market[2]. 2. Financial Risk Management Under the COSO-ERM Framework ABC Biotech Company, headquartered in China, is a biotech firm focused on developing innovative and differentiated biopharmaceutical products. The company's research and development efforts are primarily centered on the creation of novel drugs with global market potential, especially in the fields of immunomodulation and cancer treatment. ABC Company's R&D strategy is to develop highly differentiated and first-in-class biologics. In addition to its R&D center and operational base in China, ABC Biotech Company has established strategic partnerships with global pharmaceutical firms, expanding its international influence and accelerating the clinical development and commercialization of its drugs through a global network of partners. Listed on the U.S. NASDAQ stock market, ABC Company is one of the Chinese biotech firms that garner significant investor attention. The company's stock performance is influenced by various factors, including R&D progress, market demand, and regulatory policies. This paper uses ABC Company as a case study to analyze its financial risk management status under the COSO-ERM 2017 framework. The COSO-ERM 2017 framework offers a comprehensive perspective on risk management, including five core elements: "Governance and Culture," "Strategy and Objective Setting," "Performance," "Review and Revision," and "Information Communication and Reporting." These elements and the accompanying 20 principles provide guidance for companies like ABC Biotech in addressing financial risks [3]. In implementing the COSO-ERM 2017 framework, ABC Biotech faces the challenge of integrating these principles into 12 its specific context. This includes aligning its governance and culture with risk management priorities, setting strategic objectives that account for inherent financial risks, measuring performance in terms of risk management effectiveness, regularly reviewing, and revising risk strategies, and maintaining clear and effective communication regarding risk-related information. Given the company's focus on innovative and high-stakes R&D projects, financial risk management is particularly crucial. The uncertainty inherent in drug development, coupled with the complexities of operating in a global market and navigating regulatory environments, adds layers of financial risk that must be adeptly managed. Furthermore, ABC Biotech's presence in the stock market introduces additional financial risk factors, including market volatility and investor sentiment. Effective financial risk management under the COSO-ERM framework is essential for sustaining the company's growth trajectory, maintaining investor confidence, and achieving long-term strategic goals. The paper concludes that the COSO-ERM 2017 framework, when properly adapted and applied to the unique challenges and opportunities of ABC Biotech, can serve as a robust tool for navigating the complex landscape of financial risks in the biotech industry. 2.1. Corporate Governance Culture Under the COSO-ERM framework, a strong corporate governance culture is seen as pivotal in creating an effective risk management environment within the company, ensuring the efficient execution of internal management systems. ABC Biotech Company, having undergone significant development, has established a comprehensive "Internal Control Handbook" to enhance and strengthen its internal control system. The organizational structure of ABC Company includes key departments such as Executive Management, R&D, Clinical Trials, Quality Control/Assurance, Procurement, Production, Human Resources, Finance, Regulatory Affairs, Marketing, Sales, and IT. As a Chinese biotech company listed on the U.S. Nasdaq, ABC Company's corporate governance culture plays a crucial role in ensuring research and development success, compliance, market trust, and investor relations. Innovation culture, being a core driver, is vital in the biotech industry. ABC Company encourages innovative thinking, continuous improvement, and new drug development, supporting R&D teams in their innovative projects and providing the necessary resources and environment for the incubation of new drugs and treatment methods. The company places high importance on intellectual property protection to secure patents and trade secrets of its R&D outputs. Globally, ABC maintains and enforces intellectual property rights to ensure a return on R&D investment. Transparency in clinical trials, including trial design, patient selection, data reporting, and safety monitoring, is a priority for ABC Company. The company strictly adheres to ethical standards, protecting patient rights and ensuring the ethical and legal conduct of clinical trials. Complying with regulations from bodies like the FDA and the China National Medical Products Administration, ABC Company ensures the safety and efficacy of its drugs. High standards of compliance are maintained throughout the drug development, production, and sales processes. Regular financial reports, investor conference calls, and open day events are conducted to maintain good communication with investors, providing a transparent view of corporate development, R&D progress, and market prospects while adhering to information disclosure regulations. However, fully complying with the constantly changing international regulatory environment, particularly across different jurisdictions like China and the U.S., can be challenging for ABC Company. Non-compliance can lead to legal litigations, fines, or a decline in market trust. Organizational structure and internal communication might lack cross-departmental collaboration, potentially leading to information silos that affect decision-making quality and timeliness. This could result in inconsistencies and duplicative efforts in project management and operational efficiency. A disconnect between leadership and grassroots employees might exist, creating gaps in communication and understanding, leading to decisions that are out of touch with on-the-ground realities. In the highly competitive biotech industry, attracting and retaining top talent can be a continual challenge, with talent turnover potentially impacting the continuity and success rate of R&D projects. As a Chinese company listed in the U.S., cross-cultural management challenges, such as barriers in management and communication due to cultural differences, are present. Insufficient response to market trends or inadequate communication with investors can lead to stock price volatility or a decline in investor confidence. Proactively managing investor expectations and communicating the company's developments and challenges timely and accurately is crucial. These deficiencies can negatively impact the company's operational efficiency, regulatory compliance, market reputation, and long-term success. Identifying and addressing these issues is vital for enhancing the company's overall governance level and market performance. 2.2. Company Strategic Objectives Strategy and objective setting is a crucial component of the COSO-ERM framework, guiding the direction and targets for corporate financial risk management. Effective corporate financial management requires the buy-in and participation of all employees. At the strategic level, ABC Company focuses on developing innovative drugs and treatment methods to meet market demands, expanding its market share, particularly in emerging markets and untapped areas. While maintaining product quality, the company ensures compliance with international regulatory standards and incorporates sustainable and ethical practices into its operations. ABC must balance innovation-driven initiatives with cost control, maintaining market sensitivity and regulatory compliance. Functionally, the R&D department prioritizes new drug discovery and development, the Clinical Trials department focuses on managing drug trials to ensure safety and efficacy, and the Marketing department emphasizes product marketing and sales strategies. The Quality Control department is committed to ensuring product quality and standard compliance in production processes. The Regulatory Affairs department ensures the company's adherence to all pharmaceutical regulatory laws, while the HR department focuses on building a risk culture. The Procurement department is attuned to external market trends, and the Finance department concentrates on managing corporate financial risks and financial indicators. All departments need to collaborate to support the company’s overall strategy while 13 addressing challenges within their respective areas. However, ABC Biotech Company's overall weaknesses include resource limitations, inaccurate market forecasting, complexity in compliance, and difficulties in talent recruitment and retention. By identifying these weaknesses, measures can be taken to strengthen them, improving overall operational efficiency and market competitiveness. Regular assessments of the effectiveness of its strategy implementation and measures to address identified deficiencies are necessary. Optimizing resource allocation, strengthening internal management, improving market adaptability, enhancing talent management, ensuring regulatory compliance, and continuously driving technology and innovation can better achieve strategic objectives and maintain a leading position in the industry [4]. 2.3. Risk Identification Risk identification, assessment of the severity of risks, and the execution of risk responses are crucial components of the "Performance" element in the COSO-ERM framework. In the process of corporate financial risk management, identifying and assessing risks, and responding to them are fundamental. Effective financial risk management must begin with the identification of financial risks. Financial personnel in a company need to employ a systematic and rational approach to identify potential risks, considering the actual operation and development of the business. At ABC Company, an in-depth analysis of financial reports can identify potential risks to its financial health. Key areas of focus include profitability, cash flow, debt levels, and the health of the balance sheet. Detailed operating data such as sales revenue, cost control, and inventory management are used to evaluate the company’s operational efficiency and profitability. Attention is paid to the relationship between R&D expenditures and revenues, as well as the return on investment in R&D. Liquidity ratios, such as the current ratio and quick ratio, are analyzed to assess the company’s ability to repay short-term debts. Long-term debt-paying ability is evaluated through capital structure and debt ratios. Profitability indicators, such as net profit margin and gross profit margin, reflect the company’s profitability and consider the impact of R&D spending on profits. ABC Company establishes response strategies for identified financial risks, such as cash management, cost control, and diversification of revenues. These strategies are designed to prepare for potential market changes or economic fluctuations, to reduce their impact on the company's financial condition. For significant risks that are identified, specific mitigation measures are developed, such as risk diversification, insurance coverage, and strengthening internal controls. The effectiveness of risk management plans is regularly assessed, and adjustments are made based on changes in the market and business operations. Effective financial risk management is key to ensuring the company's long-term and stable development. Through precise financial risk identification, assessment, and response, ABC Company can better manage and mitigate financial risks associated with its business operations. 2.4. 2.4 Risk Assessment Financial risk assessment is the process of measuring or predicting the likelihood of potential events causing financial losses, which helps managers prioritize and focus on key areas in financial risk management. A lack of sensitivity to risk events by financial personnel can negatively impact the accuracy of financial risk assessment. ABC Company currently employs the Altman Z-score method for assessing financial risks, choosing solvency, profitability, operational capability, and growth potential as key analysis indicators. This comprehensive analysis of the company’s financial condition forms the basis for financial risk reports. When assessing financial risks at ABC Company, several factors are considered to ensure effective identification and management of risks impacting its financial stability and long-term growth: R&D Cost and Return Risk: Assessment Criteria: Consideration of the ratio of R&D investment to anticipated returns, analyzing the cost-effectiveness of R&D projects. Risk Indicators: Proportion of R&D spending to total revenue, success rate of R&D projects, and length of R&D cycles. Market and Commercialization Risk: Assessment Criteria: Analysis of market demand, competitive landscape, and product pricing strategies. Risk Indicators: Market potential for new drugs, market share of competitive products, pricing strategies, and insurance reimbursement policies. Regulatory Compliance Risk: Assessment Criteria: Consideration of changes in pharmaceutical regulatory laws and their impact on product approvals. Risk Indicators: Risk of delays in the regulatory approval process, frequency, and impact of changes in the regulatory environment. Financial Robustness: Assessment Criteria: Analysis of the company's balance sheet, cash flow status, and debt structure. Risk Indicators: Liquidity ratio, debt ratio, cash flow, and solvency. Exchange Rate and Global Economic Risk: Assessment Criteria: Due to ABC Company’s operations in international markets, assessment of the impact of exchange rate fluctuations and global economic changes. Risk Indicators: Proportion of foreign currency transactions, impact of exchange rate fluctuations on costs and revenue. Intellectual Property Protection Risk: Assessment Criteria: Consideration of the company's patent strategy and effectiveness of intellectual property protection. Risk Indicators: Remaining duration of patent protection, potential patent litigation risks. Investor Confidence and Market Reputation: Assessment Criteria: Analysis of public and investor perceptions of the company's financial health and growth potential. Risk Indicators: Stock price volatility, market confidence indicators, media coverage, and public image. Each of these factors plays a crucial role in understanding and managing the financial risks faced by ABC Company. Regularly updating and refining the risk assessment process in light of changing market conditions, regulatory landscapes, and internal developments is essential for maintaining a robust risk management framework. Effective financial risk management is not only about identifying potential risks but also about taking proactive measures to mitigate their impact, thereby ensuring ABC Company’s sustained growth and financial health [5]. 2.5. Risk Response Effectively managing financing and operational risks is crucial for the long-term stability and growth of a company. In terms of financing, ABC Company faces primary challenges in debt management and diversifying financing strategies. Despite certain levels of debt, it is vital to have clear debt management policies and repayment plans, 14 ensuring the debt structure aligns with the company's long- term funding requirements. Besides traditional debt and equity financing, ABC Company considers alternative financing avenues, such as partnerships, government grants, or credit arrangements, to balance its capital structure. In managing operational risks, adopting strategies of risk retention and transfer is key. Identifying which risks can be managed internally and which should be transferred through insurance or outsourcing is crucial. Developing contingency plans and mitigation strategies for critical risks is essential. Monitoring cash flow status to ensure sufficient working capital to handle contingencies, along with cost control and efficiency improvements, helps lower operational risks. To continuously monitor these risks, ABC Company has established a comprehensive risk monitoring system to track financial and operational risks and regularly assesses the effectiveness of its risk management strategies, making adjustments based on market and business changes. Strengthening internal controls and compliance reviews is equally important to ensure all business activities comply with legal and regulatory requirements, crucial for maintaining the company's long-term healthy development. Through these strategies and measures, ABC Company can maintain resilience and stability in the face of various financial risks, supporting its ongoing growth and development. 2.6. Risk Review and Revision Risk review and revision are key processes in implementing the COSO-ERM framework, involving comprehensive assessments of potential changes, reviewing existing risks and performance, and continually seeking improvements in risk management. ABC Company regularly assesses external environments, such as market trends, regulatory changes, and technological advancements, and their potential impacts on the company's business and risk status. Internal changes, like strategic adjustments, organizational structure changes, and new product developments, are also considered. ABC Company reviews and evaluates the effectiveness of its existing risk management strategies, using performance indicators to measure the outcomes of risk management activities and comparing these results with the company's overall performance objectives. Based on these assessments, ABC Company identifies deficiencies and opportunities for improvement in the risk management process, promoting best practices and innovation in risk management to enhance overall risk management capabilities. By training and educating employees to raise awareness of the importance of risk management and embedding a risk-conscious culture, encouraging active participation among staff is achieved. Effective communication of risk review and revision outcomes with all stakeholders and updating risk reports and strategy documents when necessary are crucial steps. Through such a process, ABC Company can respond promptly to current risk challenges while continuously optimizing its risk management framework, maintaining competitiveness and robust growth in a dynamically changing business environment. 2.7. Risk Information Communication and Reporting In the context of implementing the COSO-ERM framework at ABC Company, risk information communication and reporting are key elements of the framework and are especially important for the company. This involves not only the effective use of information technology but also the communication of risk information and reporting on risks, corporate culture, and performance. As the company progresses with its digital transformation, these aspects become increasingly significant. ABC Company needs to ensure it has efficient systems capable of handling large amounts of data to accurately identify and assess risks. These technologies also aid in responding quickly when risks arise. Communicating risk information is key to ensuring all stakeholders are aware of the risks faced by the company and the measures in place to address them. This involves internal communication among employees, management, and the board of directors, as well as external communication with investors, regulatory bodies, and the public. Clear and timely communication of risk information enhances transparency and increases stakeholder understanding and trust in the company's strategies. In the area of clinical trials, communication through information technology is particularly crucial for ABC Company. This includes using advanced data management systems to collect, store, and analyze clinical trial data, and utilizing data analysis tools to process complex clinical data. Establishing a real-time data sharing platform allows clinical trial teams, researchers, and regulatory bodies to access and share trial data in real-time, accelerating the review process and improving decision-making efficiency. Implementing Electronic Data Capture (EDC) systems for recording clinical trial data reduces human errors and improves data entry efficiency. Remote monitoring technologies and electronic monitoring tools are used to oversee the progress of clinical trials, ensuring the quality and compliance of the trials. A risk- based monitoring strategy is employed, using information technology to identify and manage key risk points in clinical trials. Through these measures, ABC Company can ensure the accuracy and completeness of clinical trial data, while speeding up the data processing and review process. This not only improves the efficiency and quality of clinical trials but also strengthens communication and collaboration with regulatory bodies and other stakeholders. In the context of digital transformation, such information technology communication strategies are vital for accelerating the development and market release of pharmaceutical products [6]. 3. Enterprise Financial Risk Management Framework Based on the COSO-ERM Framework COSO-ERM framework, develop an enterprise financial risk management framework is crucial for a company. The design of this framework aims to systematically identify, assess, monitor, and mitigate a variety of risks that could impact the company’s financial stability and growth. Given that ABC Company is a company active in the biotechnology field, the financial risks it faces are particularly diverse and complex, including R&D risks, market risks, regulatory compliance risks, and liquidity risks. Therefore, a comprehensive financial risk management framework must cover these areas of risk while also considering the company's overall strategic objectives and operational model. Key components of the framework: 15 3.1. Risk Identification and Assessment: Risk identification and assessment form the cornerstone of risk management. This initial phase encompasses pinpointing both internal and external risk factors capable of influencing the company’s financial outcomes and strategic goals. Key areas of focus include the unpredictability inherent in R&D, the competitive dynamics of the market, shifts in regulatory landscapes, and risks associated with financing. Employing sophisticated data analytics and leveraging market intelligence are critical in precisely identifying and understanding these risks. This comprehensive approach ensures a proactive stance in anticipating and preparing for potential challenges that might affect the company's financial health. 3.2. Risk Quantification and Prioritization: After risk identification, the process advances to the quantification and prioritization of these risks. This crucial stage requires a detailed evaluation of the potential magnitude and likelihood of each identified risk. Techniques such as sophisticated financial modeling, comprehensive sensitivity analysis, and rigorous probability assessments are employed to accurately quantify these risks. The act of prioritization is instrumental in guiding the company’s strategic allocation of resources and attention, ensuring that the focus is directed towards managing risks with the highest potential impact. This systematic approach facilitates a more efficient and effective risk management strategy, aligning with the company’s overall risk tolerance and strategic objectives [7]. 3.3. Risk Mitigation Strategies and Implementation: Following thorough risk assessments, ABC Company is tasked with formulating and enacting robust risk mitigation strategies. To illustrate, mitigating R&D risks might involve diversifying investments across multiple R&D initiatives; market risks can be addressed through strategies that lessen dependence on any single market segment; for compliance risks, the enhancement of regulatory compliance protocols coupled with ongoing staff training is vital; and tackling liquidity risks necessitates the maintenance of a robust cash reserve complemented by a flexible capital allocation approach. For ABC Company, the efficacy of financial risk management hinges on persistent risk monitoring and reporting. The establishment of a dynamic risk management information system is crucial for facilitating real-time monitoring and in-depth analysis of risks. Regular risk reporting plays a pivotal role in keeping management and the board of directors well-informed about the current risk landscape, enabling timely and strategic decision-making. Furthermore, transparent communication regarding risk management practices with investors and other stakeholders is imperative to bolster the company's transparency and market reputation. Adhering to a financial risk management framework anchored in the COSO-ERM principles, ABC Company is well-positioned to identify, assess, mitigate, and oversee financial risks more effectively. This strategic approach is instrumental in ensuring financial stability and fostering growth within the highly competitive biotechnology sector, all while maintaining regulatory compliance and business continuity. By embracing a comprehensive and adaptive financial risk management framework, ABC Company is poised to effectively navigate financial uncertainties, thus supporting its long-term stability and sustainable development. 4. Conclusion Financial risk management, as a continuous and cyclical dynamic process, plays an essential role in the long-term development of a company. Establishing and maintaining an effective financial risk management system is not just a routine business activity but a strategic necessity. Implementing risk management strategies based on the COSO-ERM framework enables enterprises to better identify, assess, and respond to various financial risks, thus protecting the company from adverse impacts. A systematic approach to risk management tightly integrates risk management with the company’s overall strategy, ensuring that risk management measures not only address current challenges but also support the company’s long-term development goals. Effective financial risk management helps to avoid potential financial losses and provides stable support for the company in a constantly changing market environment, promoting high-quality and sustainable growth. Financial risk management is not an isolated task; it is an integral process closely related to the company’s overall development strategy. By continuously optimizing and adjusting risk management strategies to better adapt to changes in the external environment, robust and sustained growth can be achieved. This comprehensive approach ensures that the company can navigate through various challenges and maintain its competitive edge in the marketplace, paving the way for ongoing success and resilience. References [1] Committee of Sponsoring Organizations of the Treadway Commission (COSO). (1992). Internal Control-Integrated Framework (COSO Report). Harborside, NJ: AICPA [2] Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2004). Enterprise Risk Management- Integrated Framework. New York: COSO. [3] D'Aquila, Jill M; Houmes, Robert. COSO's Updated Internal Control and Enterprise Risk Management Frameworks: The CPA Journal; New York Vol. 84, Iss. 5, (May 2014): p. 54-59. [4] Robert R. Moeller: COSO Enterprise Risk Management: Establishing Effective Governance, Risk, and Compliance Processes (Second Edition, John Wiley & Sons, Inc, USA 2011) [5] Robert R. Moeller: Executive's Guide to IT Governance: Improving Systems Processes with Service Management, COBIT, AND ITIL (John Wiley & Sons, Inc, USA 2013). [6] Andrew Hiles: Enterprise Risk Management (First published, USA, 02 January 2012 https://doi.org/10.1002/9781119205883.ch1). [7] Michele Rubino, Filippo Vitolla: Corporate governance and the information system: how a framework for IT governance supports ERM: Emerald Group Publishing Limited, Vol. 14 No. 3, 2014, pp. 320-338.