+ | - | reset

Introduction: The Critical Gap in Currently Available Risk Frameworks

In an era defined by volatility and uncertainty, a robust risk culture is universally acknowledged as the bedrock of organisational resilience. Frameworks like ISO 31000:2018 and COSO ERM significantly highlights the importance of culture, while recently emerging models like the IRM ABC Framework provide a deeper behavioural philosophy. However, a critical gap persists globally: these frameworks mainly describe the “what” and “why” of risk culture, but there is a hollow absence of a detailed, structured “how” on risk culture implementation.

The Risk Culture Management Framework (RCMF) is a pioneering response to this universal challenge. It is the first systematic methodology designed explicitly to develop, implement, and sustain risk culture from the ground up. It transforms abstract principles into a tangible, actionable, and iterative process.

Core Philosophy: Culture as a Living System

The RCMF is structured under one core philosophy: Risk culture is not a set of rules, but a living system of relationships. It is the major determinant of the effectiveness of all formal risk management processes. This philosophy underpins the framework’s iterative, evolutionary nature, moving beyond one-off projects towards continuous cultural nurturing.

The RCMF’s Five-Phase Iterative Process

The framework is structured around five dynamic and interconnected phases, supported by continuous monitoring and adaptation:

  1. Define Target Culture: Establishes a clear, measurable goal by defining 3-5 behavioural pillars and translating them into specific qualitative narratives and quantitative metrics.
  2. Assess Current Culture: Provides a holistic diagnostic of the existing culture using discreet, face-level, and relevant assessment methods to identify the actual gaps between current and target behaviours.
  3. Design Action Plan: Proposed action plan goes beyond generic “training” to design targeted interventions using the MINDSPACE behavioural science framework. It strategically plans the journey from isolated practice to collective habit, including robust relapse prevention mechanisms.
  4. Execute & Implement: Offers three implementation pathways that ensures progress can be made regardless of the organisation’s initial risk maturity or leadership buy-in:
    i. Top-Bottom
    ii. Bottom-Top
    iii. Infiltrative
  5. Monitor & Reinforce: Creates a sustainable feedback loop using a balance of leading and lagging indicators and formal annual reviews to ensure the culture remains dynamic and resilient.

Key Highlights of the RCMF

  1. From Philosophy to Mechanism: The RCMF is the crucial link that translates the behavioural “why” from frameworks like IRM ABC into a tangible “how,” providing the specific processes for habit formation.
  2. The “Habit to Culture” Milestone Model: It provides a clear, staged pathway from Practice → Behaviour → Habit → Culture with specific goals and actions for each stage, making long-term cultural transformation manageable and measurable.
  3. Actionable Behavioural Toolkit: By leveraging the nine influences of the MINDSPACE framework, the RCMF equips practitioners (albeit beginners to seasoned practitioners) to design interventions that work with human nature, not against it.
  4. Proactive Relapse Prevention: It is the first framework to formally incorporate strategies to identify triggers and “fortify defences” to prevent cultural relapsing, treating culture as a dynamic asset that requires active protection.

Conclusion

The Risk Culture Management Framework (RCMF) represents a significant step forward in risk management practice. It directly addresses the most persistent challenge faced by organisations worldwide: moving from knowing that culture is important to knowing how to build and sustain it.

For boards, senior management, and risk practitioners, the RCMF provides the missing manual which is a rigorous, practical, and sustainable system to grow a risk culture that truly protects and creates value, ensuring organisations can navigate uncertainty with confidence.


About the Author

Adley John Fisher Mangkiu is a senior risk management professional specialising in Enterprise Risk Management (ERM), business continuity planning, and internal audit. With experience handling risk across diverse sectors including renewable energy, agribusiness and retail.

Photo by Markus Winkler on Unsplash.

Rate this article

5 / 5. 4

Is this article good for you?
markus winkler WkdzUQrKWys unsplash scaled
5.0
4  Minutes

The Risk Culture Management Framework (“RCMF”): Filling in the gap of Risk Cul...

23 October 2025

READ MORE
Share
anika huizinga RmzR87vTiYw unsplash scaled
5.0
7  Minutes

How Do You Weigh a Biased Perception of Risk?

05 August 2024

READ MORE
Share
samson ZGjbiukp A unsplash scaled
5.0
16  Minutes

Why Bad Things Happen to Good Companies: A Risk Culture Study

23 March 2023

READ MORE
Share
lycs architecture U2BI3GMnSSE unsplash scaled
5.0
16  Minutes

Strengthening Institutional Risk and Integrity Culture

06 October 2021

READ MORE
Share

Survey

ICDM
Homepage