In an earlier post, I described my experience with changing culture in order to embed risk management as a systemic capability.
Towers Perrin recently published a brief paper titled Assessing Your Company’s Risk Culture, describes the two key pillars emerging as supporting components of ERM: risk culture and governance, and risk-based decision-making.