Practical ideas: Reinforce the “no blame” culture

Risk managers should encourage employees to openly raise risk management related issues. This is possible by spending a considerable amount of time every day communicating with their colleagues and staying up-to-date on the latest developments and emerging risks or failures in the internal control system.

Share the risk manager’s contact information with employees or provide a confidential hotline for communicating risks through the internal company website or via the phone. Risk managers should motivate and encourage staff to be proactive about identifying and preventing risks. One of the risk managers we have interviewed started a table tennis tournament to build rapport with other business units and to have regular conversations in an informal setting with other managers.

Risk managers may consider introducing a rewards programme for active participation in risk management activities. It is important to encourage a “no blame” culture and communicate it throughout the company.

Another “unorthodox” option was to join forces with internal audit department and play “good cop, bad cop” with the business to drive the behaviour to reinforce better management of risks.


Reward open risk communication

Encourage people to share information about risks by reaching out to them and by visiting their workplace regularly

Participate in corporate team building activities and get to know local business units and the risks they are facing on a day to day basis



 In this video, Alex Sidorenko talks about four critical skills that every risk manager must have to start on the risk management journey. It doesn’t have to be one person with all four skills, it could be a team of people.
Alex Sidorenko from RISK-ACADEMY shares some of his practical suggestions on how to build a risk management culture.



Sample assessment of risk management culture – management-culture-questionnaire/

RISK-ACADEMY offers online courses


Informed Risk Taking

Learn 15 practical steps on integrating risk management into decision making, business processes, organizational culture and other activities!


ISO31000 Integrating Risk Management

Alex Sidorenko, known for his risk management blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.


Advanced Risk Governance

This course gives guidance, motivation, critical information, and practical case studies to move beyond traditional risk governance, helping ensure risk management is not a stand-alone process but a change driver for business.


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.