Organisations that promote formalised and standardised risk management practices can create a risk culture where their employees view risk management as a compliance and tick-the-box exercise.

In comparison, organisations that intentionally promote a more informal environment where risk discussions and information sharing naturally occur as part of the broader organisational culture when making decisions can experience a positive risk culture. Continue reading →