Risk Management in Organizational Accounting based on Project Management Maturity Model
Zhengkun Yan
Journal of Information Security Research, Vol. 16, No. 4, 2025.
DOI: https://doi.org/10.6025/jisr/2025/16/4/150-162
Link: https://www.dline.info/jisr/fulltext/v16n4/jisrv16n4_2.pdf
Abstract:
The paper explores the integration of the Organizational Project Management Maturity Model (OPM3) into
the internal control framework of enterprise accounting information systems. It emphasizes that weak internal
controls exemplified by historical corporate scandals like Enron and WorldCom can lead to financial
misreporting, loss of investor confidence, and even bankruptcy. The study argues that robust internal controls
are now essential for corporate governance, strategic decision making, and accessing capital markets,
especially for Chinese firms seeking overseas listings.
Using OPM3 a framework developed by the Project Management Institute the paper constructs a tailored
internal control model for accounting information systems in a digital environment. It identifies critical
control points across five COSO based components: control environment, risk assessment, control activities,
information and communication, and monitoring. Through a case study involving 40 participants, the author
applies a fuzzy evaluation method to assess maturity levels, finding the organization operates between basic
and standardized levels (scoring 2.86 out of 5). The paper concludes with practical recommendations:
clarifying role segregation, implementing password protocols, establishing reward punishment mechanisms,
creating risk early warning systems, and strengthening corporate culture to enhance internal control
effectiveness and transform risks into strategic opportunities.