Great article by Norman Marks on the topic of risk governance. I’ve been talking about this for years, here is my video on board reporting and hence oversight https://youtu.be/8zrR8U0fpEA
Check out other decision making books
RISK-ACADEMY offers online courses

+ Buy now
ISO31000 Integrating Risk Management
Alex Sidorenko, known for his risk management blog http://www.riskacademy.blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.