Risk analysis in extended enterprise environments: Identification of critical risk factors in B2B E-Commerce relationships

Steve G. Sutton, Deepak Khazanchi, Clark Hampton, Vicky Arnold

Research output: Contribution to journalArticlepeer-review

53 Scopus citations


The focus of this study is to identify, the critical risk factors that can be used to assess the impact of B2B e-commerce on overall enterprise risk. We apply the Khazanchi and Sutton (2001) framework for B2B e-commerce assurance as the organizing conceptual model for the study. The framework focuses on three primary risk components: (1) technical risks, (2) application-user risks, and (3) business risks. To identify o critical set of B2B risk factors, structured focus groups applying a nominal group technique were conducted with three internal constituency groups (corporate groups consisting of IS security, internal IT audit, and e-commerce development managers) and two external constituency groups (e-commerce consultants and external IT auditors). Tests of consistency between the groups confirm strong agreement on the identified critical B2B risk factors. Tests were also conducted on participant groups' perceived relative importance of the critical B2B risk factors. The only substantial inconsistencies were between the internal constituency groups and the e-commerce consultants' group for the business risk factors. This would appear to indicate that the priorities of internal groups might be different from the e-commerce consultants who appear more focused on management support of projects than on active involvement of trading partner staff with systems integration. Subsequent testing of the three-component B2B risk assurance model with a follow-up questionnaire suggests that the identified risk factors support the model, including theorized interrelationships among the three risk components.

Original languageEnglish (US)
Pages (from-to)151-174
Number of pages24
JournalJournal of the Association for Information Systems
Issue number3-4
StatePublished - 2008


  • Business partners
  • Business-to-business
  • E-business
  • Electronic commerce
  • Enterprise risk management
  • Interorganizational systems
  • Systems assurance
  • extended enterprise systems

ASJC Scopus subject areas

  • Information Systems
  • Computer Science Applications


Dive into the research topics of 'Risk analysis in extended enterprise environments: Identification of critical risk factors in B2B E-Commerce relationships'. Together they form a unique fingerprint.

Cite this