with Hsu, C. , Backhouse, J. , 2016, Institutionalizing operational risk management: an empirical study, in L. Willcocks, C. Sauer & M. C. Lacity (eds.), Enacting research methods in information systems 2, Basingstoke, Palgrave Macmillan, pp. 134-166.