{"id":1819,"date":"2022-11-30T09:44:42","date_gmt":"2022-11-30T09:44:42","guid":{"rendered":"https:\/\/www.theirmindia.org\/blog\/?p=1819"},"modified":"2026-02-18T17:26:29","modified_gmt":"2026-02-18T17:26:29","slug":"10-questions-the-board-should-ask-about-risk-culture","status":"publish","type":"post","link":"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/","title":{"rendered":"10 Questions The Board Should Ask About Risk Culture"},"content":{"rendered":"<p><a href=\"https:\/\/www.theirmindia.org\/certification-track\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-5040\" src=\"https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2025\/11\/blog-image-300x74.png\" alt=\"Getting India Risk Ready\" width=\"668\" height=\"166\" srcset=\"https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2025\/11\/blog-image-300x74.png 300w, https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2025\/11\/blog-image-768x191.png 768w, https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2025\/11\/blog-image.png 1024w\" sizes=\"auto, (max-width: 668px) 100vw, 668px\" \/><\/a><\/p>\n<p>Risk culture is a term describing the values, beliefs, knowledge and understanding of risk shared by a group of people with a common purpose, in particular the employees of an organisation or of teams or groups within an organisation. This applies whether the organisations are private companies, public bodies or not-for-profits and wherever they are in the world. We propose the use of a simple A-B-C approach (Institute of Risk Management, 2012) as helpful in understanding how culture, and hence risk culture, works in practice.<\/p>\n<ul>\n<li>The Culture of a group arises from the repeated Behaviour of its members<\/li>\n<li>The Behaviour of the group and its constituent individuals is shaped by their underlying Attitudes<\/li>\n<li>Both Behaviour and Attitudes are influenced by the prevailing Culture of the group.<\/li>\n<\/ul>\n<p>Although there is no single right way to measure risk culture, there are a number of diagnostic tools available that can be used to indicate and then track the risk culture in an organisation. The mix of tools and the order of their deployment will depend on the context of the organisation and its risk management maturity. The RMAT \u00ae or the Risk Management Aptitude Test is a great start for running a culture <strong><em><u><a href=\"https:\/\/www.theirmindia.org\/level1\">risk assessment<\/a><\/u><\/em><\/strong> survey before the Board, RMC and CRO develop action plans on risk culture. You can write to <u><a href=\"mailto:corporatetraining@theirmindia.org\"><em><strong>corporatetraining@theirmindia.org<\/strong><\/em><\/a><\/u> to get more information on the RMAT tool.<\/p>\n<p>Corporate governance requirements around the world are increasingly demanding that boards of organisations should understand and address their risk cultures. The board has a responsibility to set, communicate and enforce a risk culture that consistently influences, directs and aligns with the strategy and objectives of the business and thereby supports the embedding of its <em><strong><u><a href=\"https:\/\/www.theirmindia.org\/blog\/risk-management-process-identifying-risks\/\">risk management frameworks and processes<\/a><\/u><\/strong><\/em>. This starts with the risk behaviours, attitudes and culture of the board itself and reaches down through the organisation.<\/p>\n<ol>\n<li>What tone do we set from the top? Are we providing consistent, coherent, sustained and visible leadership in terms of how we expect our people to behave and respond when dealing with risk?<\/li>\n<li>How do we establish sufficiently clear accountabilities for those managing risks and hold them to their accountabilities?<\/li>\n<li>What risks does our current corporate culture create for the organisation, and what risk culture is needed to ensure the achievement of our corporate goals? Can people talk openly without fear of consequences or being ignored?<\/li>\n<li>How do we acknowledge and live our stated corporate values when addressing and resolving risk dilemmas? Do we regularly discuss issues in these terms and has it influenced our decisions?<\/li>\n<li>How do the organisation\u2019s structure, processes and reward systems support or detract from the development of our desired risk culture?<\/li>\n<li>How do we actively seek out information on risk events and near misses \u2013 both ours and those of others &#8211; and ensure key lessons are learnt? Do we have sufficient organisational humility to look at ourselves from the perspective of stakeholders and not just assume we\u2019re getting it right?<\/li>\n<li>How do we respond to whistleblowers and others raising genuine concerns? When was the last time this happened?<\/li>\n<li>How do we reward and encourage appropriate risk-taking behaviours and challenge unbalanced risk behaviours (either overly risk-averse or risk-seeking)?<\/li>\n<li>How do we satisfy ourselves that new joiners will quickly absorb our desired cultural values and that established staff continue to demonstrate attitudes and behaviours consistent with our expectations?<\/li>\n<li>How do we support learning and development associated with raising risk awareness culture and competence in managing risk at all levels? What training has we as a board had at risk?<\/li>\n<\/ol>\n<p><strong>Case study <\/strong>(Source: BBC Website, 2012, Barclays Press Release, 2012)<\/p>\n<p>Staff at Barclays repeatedly filed misleading figures for interbank borrowings. First, between 2005 and 2008 &#8211; and sometimes working with traders at other banks &#8211; they tried to influence the Libor rate, in order to boost their profits. Then between 2007 and 2009, at the peak of the global banking crisis, Barclays filed artificially low figures. This tactic sought to hide the level to which Barclays was under financial stress at a point where their peers were being forced to accept state funding. When the scandal came to light it led to the resignation of the bank\u2019s chief executive Bob Diamond, along with Barclays chairman Marcus Agius. Barclays was fined \u00a3290m by UK and US regulators for rigging Libor and investigations are continuing. Barclays has set up an independent review to assess the bank\u2019s current values, principles and standards of operation and determine to what extent those need to change. It will also test how well current decision-making processes incorporate the bank\u2019s values, standards and principles and outline any changes required.<\/p>\n<p><strong>Boost the risk culture of your organization and build risk intelligence by nominating your risk champions and teams for <em><u><a href=\"https:\/\/www.theirmindia.org\/certification-track\">IRM\u2019s global Enterprise Risk Management exams<\/a><\/u><\/em> or <u><a href=\"https:\/\/www.theirmindia.org\/corporate-trainings\">customised corporate training programmes<\/a><\/u>. <\/strong><\/p>\n<p><strong>\u00a0<\/strong><strong>Download IRM\u2019s detailed guide <em><u><a href=\"https:\/\/www.theirmindia.org\/thoughtleadership\">here<\/a><\/u><\/em>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Risk culture is a term describing the values, beliefs, knowledge and understanding of risk shared by a group of people with a common purpose, in particular the employees of an organisation or of teams or groups within an organisation. This applies whether the organisations are private companies, public bodies or not-for-profits and wherever they are in the world. We propose the use of a simple A-B-C approach (Institute of Risk Management, 2012) as helpful in understanding how culture, and hence risk culture, works in practice. The Culture of a group arises from the repeated Behaviour of its members The Behaviour [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6646,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[58],"tags":[],"class_list":["post-1819","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-chief-risk-officers"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v15.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>10 Questions The Board Should Ask About Risk Culture - IRM India Affiliate<\/title>\n<meta name=\"description\" content=\"Explore how attitudes and behaviours shape organisational risk culture. Learn how IRM India helps boards assess, build, and strengthen risk culture.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"10 Questions The Board Should Ask About Risk Culture - IRM India Affiliate\" \/>\n<meta property=\"og:description\" content=\"Explore how attitudes and behaviours shape organisational risk culture. Learn how IRM India helps boards assess, build, and strengthen risk culture.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/\" \/>\n<meta property=\"og:site_name\" content=\"IRM India Affiliate\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-30T09:44:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-18T17:26:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2022\/11\/Questions-The-Board-Should-Ask-About-Risk-Culture-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\">\n\t<meta name=\"twitter:data1\" content=\"3 minutes\">\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.theirmindia.org\/blog\/#website\",\"url\":\"https:\/\/www.theirmindia.org\/blog\/\",\"name\":\"IRM India Affiliate\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.theirmindia.org\/blog\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.theirmindia.org\/blog\/wp-content\/uploads\/2022\/11\/Questions-The-Board-Should-Ask-About-Risk-Culture-scaled.jpg\",\"width\":2560,\"height\":1707,\"caption\":\"Questions The Board Should Ask About Risk Culture\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/#webpage\",\"url\":\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/\",\"name\":\"10 Questions The Board Should Ask About Risk Culture - IRM India Affiliate\",\"isPartOf\":{\"@id\":\"https:\/\/www.theirmindia.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/#primaryimage\"},\"datePublished\":\"2022-11-30T09:44:42+00:00\",\"dateModified\":\"2026-02-18T17:26:29+00:00\",\"author\":{\"@id\":\"https:\/\/www.theirmindia.org\/blog\/#\/schema\/person\/e2c7c644f5ba4e6cd8025627f87412cf\"},\"description\":\"Explore how attitudes and behaviours shape organisational risk culture. Learn how IRM India helps boards assess, build, and strengthen risk culture.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.theirmindia.org\/blog\/10-questions-the-board-should-ask-about-risk-culture\/\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.theirmindia.org\/blog\/#\/schema\/person\/e2c7c644f5ba4e6cd8025627f87412cf\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.theirmindia.org\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae9be992eb4ae7b97cc78b5d1c9e2f232db61cbdd191d14a1ee7639e2c4ba1fa?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/www.theirmindia.org\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/posts\/1819","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/comments?post=1819"}],"version-history":[{"count":8,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/posts\/1819\/revisions"}],"predecessor-version":[{"id":6653,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/posts\/1819\/revisions\/6653"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/media\/6646"}],"wp:attachment":[{"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/media?parent=1819"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/categories?post=1819"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.theirmindia.org\/blog\/wp-json\/wp\/v2\/tags?post=1819"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}