The Degree of Risk Management Implementation in Enterprises in the Slovak Republic

Categorization of enterprises by size provides a fundamental understanding of the composition of the business environment. Small, medium-sized, and large enterprises play a significant role in the national economy through the execution of specific business activities. In their pursuit of enhancing the efficiency of individual business processes and mitigating the risks associated with these activities, enterprises may implement various ISO standards, including quality management, environmental management, occupational health and safety (OSH), or corporate social responsibility (CSR) systems. The sources published to date do not clearly explain the mutual relationship that arises when implementing multiple ISO standards that prioritize different activities within a single enterprise. This gap is particularly evident in the context of small enterprises, which often do not have the obligation or capacity to implement ISO standards. This study addresses this research gap by identifying the relationship between implemented ISO standards, priority activities in the risk management process, and the person responsible for these activities. The objective of this article is to examine the relationship of dependency between specific ISO standards and the priority activity in risk management. Furthermore, the study seeks to determine whether the degree of implementation of ISO standards influences the selection of the person responsible for risk management. Additionally, it examines whether dependence exists between the priority activity in risk management and the specific person responsible for risk management. The authors provide statistical hypothesis testing based on data from a nationwide survey conducted across all enterprise size categories. The results obtained from this study confirm the presence of a dependency between the degree of ISO standards implementation and the priority activity in risk management across all enterprise size categories. However, a statistically significant dependency between the degree of implementation of ISO standards and the person responsible for risk management was not confirmed in large companies. The dependency between the selection of the person responsible for risk management and the priority activity in risk management was confirmed only in small enterprises.