Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study

Enterprise risk management (ERM) is essential for enhancing sustainability and operational resilience in Thailand’s private hospitals. This study aims to systematically identify and prioritize key enterprise risks, proposing mitigation strategies to enhance the resilience of the healthcare sector. A...

Full description

Saved in:
Bibliographic Details
Main Authors: Anuchit Sermhattakit M.Pharm, MBA, Patipan Sae-Lim PhD
Format: Article
Language:English
Published: SAGE Publishing 2025-06-01
Series:Inquiry: The Journal of Health Care Organization, Provision, and Financing
Online Access:https://doi.org/10.1177/00469580251347132
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1849334620535914496
author Anuchit Sermhattakit M.Pharm, MBA
Patipan Sae-Lim PhD
author_facet Anuchit Sermhattakit M.Pharm, MBA
Patipan Sae-Lim PhD
author_sort Anuchit Sermhattakit M.Pharm, MBA
collection DOAJ
description Enterprise risk management (ERM) is essential for enhancing sustainability and operational resilience in Thailand’s private hospitals. This study aims to systematically identify and prioritize key enterprise risks, proposing mitigation strategies to enhance the resilience of the healthcare sector. A 4-phase mixed-methods approach was employed: (1) A 36-item risk inventory was developed based on global ERM frameworks and annual reports from 22 publicly listed Thai hospital companies. (2) A quantitative survey using a 5-point Likert scale was conducted with 48 senior risk and quality management professionals from HA- or A-HA-accredited private hospitals. Content validity was assessed using the Index of Item-Objective Congruence (IOC). (3) In-depth interviews were conducted with 5 ERM healthcare experts to analyze root causes and propose mitigation strategies. (4) A bibliometric analysis of 958 Scopus-indexed articles was conducted to validate global relevance, identify research gaps, and refine the study’s conceptual framework. The transition from the 36 initial risks to the 5 highest-ranked risks—clinical and patient safety, sentinel events, medical personnel shortages, cybersecurity threats, and litigation exposure—was based on quantitative ratings. Key contributing factors included ineffective clinical systems, communication breakdowns, staff turnover, low compensation, and limited cybersecurity literacy. Recommended strategies included proactive risk assessment, workforce planning, fostering a safety culture, ISO/IEC 27001 compliance, and improved provider-patient communication. The bibliometric analysis revealed a growing research focus on ERM in hospitals, with key themes encompassing patient safety, emergency response, organizational resilience, and cybersecurity—aligning with the findings of this study. This study proposes a structured ERM framework that identifies 5 key risks: patient safety, sentinel events, staff shortages, cybersecurity threats, and litigation. Recommendations include enhancing clinical governance, workforce policies, cybersecurity, legal risk management, and total quality management to improve healthcare resilience and sustainability.
format Article
id doaj-art-7a35e38dc7bd412e93d9ef46d867aec4
institution Kabale University
issn 0046-9580
1945-7243
language English
publishDate 2025-06-01
publisher SAGE Publishing
record_format Article
series Inquiry: The Journal of Health Care Organization, Provision, and Financing
spelling doaj-art-7a35e38dc7bd412e93d9ef46d867aec42025-08-20T03:45:31ZengSAGE PublishingInquiry: The Journal of Health Care Organization, Provision, and Financing0046-95801945-72432025-06-016210.1177/00469580251347132Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method StudyAnuchit Sermhattakit M.Pharm, MBA0Patipan Sae-Lim PhD1Graduate School of Management and Innovation, King Mongkut’s University of Technology Thonburi, Bangkok, ThailandGraduate School of Management and Innovation, King Mongkut’s University of Technology Thonburi, Bangkok, ThailandEnterprise risk management (ERM) is essential for enhancing sustainability and operational resilience in Thailand’s private hospitals. This study aims to systematically identify and prioritize key enterprise risks, proposing mitigation strategies to enhance the resilience of the healthcare sector. A 4-phase mixed-methods approach was employed: (1) A 36-item risk inventory was developed based on global ERM frameworks and annual reports from 22 publicly listed Thai hospital companies. (2) A quantitative survey using a 5-point Likert scale was conducted with 48 senior risk and quality management professionals from HA- or A-HA-accredited private hospitals. Content validity was assessed using the Index of Item-Objective Congruence (IOC). (3) In-depth interviews were conducted with 5 ERM healthcare experts to analyze root causes and propose mitigation strategies. (4) A bibliometric analysis of 958 Scopus-indexed articles was conducted to validate global relevance, identify research gaps, and refine the study’s conceptual framework. The transition from the 36 initial risks to the 5 highest-ranked risks—clinical and patient safety, sentinel events, medical personnel shortages, cybersecurity threats, and litigation exposure—was based on quantitative ratings. Key contributing factors included ineffective clinical systems, communication breakdowns, staff turnover, low compensation, and limited cybersecurity literacy. Recommended strategies included proactive risk assessment, workforce planning, fostering a safety culture, ISO/IEC 27001 compliance, and improved provider-patient communication. The bibliometric analysis revealed a growing research focus on ERM in hospitals, with key themes encompassing patient safety, emergency response, organizational resilience, and cybersecurity—aligning with the findings of this study. This study proposes a structured ERM framework that identifies 5 key risks: patient safety, sentinel events, staff shortages, cybersecurity threats, and litigation. Recommendations include enhancing clinical governance, workforce policies, cybersecurity, legal risk management, and total quality management to improve healthcare resilience and sustainability.https://doi.org/10.1177/00469580251347132
spellingShingle Anuchit Sermhattakit M.Pharm, MBA
Patipan Sae-Lim PhD
Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
Inquiry: The Journal of Health Care Organization, Provision, and Financing
title Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
title_full Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
title_fullStr Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
title_full_unstemmed Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
title_short Key Risks and Mitigation Strategies in Enterprise Risk Management for Private Hospitals: A Mixed-Method Study
title_sort key risks and mitigation strategies in enterprise risk management for private hospitals a mixed method study
url https://doi.org/10.1177/00469580251347132
work_keys_str_mv AT anuchitsermhattakitmpharmmba keyrisksandmitigationstrategiesinenterpriseriskmanagementforprivatehospitalsamixedmethodstudy
AT patipansaelimphd keyrisksandmitigationstrategiesinenterpriseriskmanagementforprivatehospitalsamixedmethodstudy