Assessing and Re-setting Culture in Enterprise Risk Management

Among the tenets of enterprise risk management (ERM) is the need to instill a risk-aware culture throughout the firm. Yet, how to actually interpret and change organizational culture is generally missing from the ERM literature. Prior surveys found risk managers lacked useful information about organizational culture and cultural change to implement a “risk aware culture.” Our survey of risk managers found this gap persists. The disciplines of...