“…Risk management is defined as the process of conducting risk management planning, identification, analysis, responses, monitoring and control on projects, exploration, operation and distribution (Project Management Institute, 2008). Enterprise risk management is a holistic risk management approach that offers a framework for identifying circumstances that influence organisational objectives, evaluating risk prevalence, noting responses and strategies that attenuate risks, and establishing a process to monitor risks (Ben-Amar et al, 2014). As the mediating variable, enterprise risk management implementation (ERM) constructs are governance, process and structure.…”