Risk Culture Framework™

Risk culture is the set of shared values, attitudes and behaviours that determine how risk is actually managed day-to-day. This framework makes culture measurable and improvable so that policy translates into practice.

Organisations have policies and frameworks on paper, but behaviour, accountability and openness fall short — risks go unspoken and incentives reward the wrong things.

Shape and sustain the behaviours and incentives that drive sound risk management at every level.

• Boards
• CROs
• HR & people leaders
• Executive teams

• Tone from the top
• Accountability & ownership
• Openness & speak-up
• Incentives & consequences
• Constructive challenge
• Culture measurement & reporting

• Board sets the tone and owns culture oversight; executives model behaviour; HR aligns incentives and consequences; the CRO measures culture and reports trends to the board.

• Risk culture diagnostic
• Culture scorecard
• Intervention roadmap
• Board culture report

• Risk culture policy
• Speak-up / whistleblowing policy
• Code of conduct
• Incentive & consequence framework

• Risk culture index score
• Speak-up reports and resolution time
• % staff completing risk training
• Employee survey trust/openness score

• Do we measure risk culture, and what is it telling us?
• Are people safe to raise bad news without fear?
• Do our incentives reward prudent risk-taking or short-term results?
• Where is accountability for risk unclear?