Check out other decision making books
RISK-ACADEMY offers online courses

+
Informed Risk Taking
Learn 15 practical steps on integrating risk management into decision making, business processes, organizational culture and other activities!

+
ISO31000 Integrating Risk Management
Alex Sidorenko, known for his risk management blog http://www.riskacademy.blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.

+
Advanced Risk Governance
This course gives guidance, motivation, critical information, and practical case studies to move beyond traditional risk governance, helping ensure risk management is not a stand-alone process but a change driver for business.
$795
Very good list Alex. I would only suggest a few changes/Qualifications.
Objective 1 – The first two boxes refer to the same issue – the owner/owner representatives (Board of Directors) set the risk strategy. The Chief Risk Executive (CRE) can advise, but the owner/BoD are the one(s) to set the tone.
Objective 2- The second box – from a risk practitioner’s viewpoint while it would be great if the CRE had such power, they do not and never will. The third box is the key box.
Objective 3 – The word “some” in the 4th box should eliminated. The CRE has to be ultimately responsible for all risk assessments in order for the entire risk management program to function properly. Also the word “risk” in the final box should be eliminated. All members of management have to be constantly improving all of their management skills – not just their subject matter skills.
Thanks Greg, the checklist is actually the summary of the free book that you can download from the menu of the left. Each point has a story behind it, all are real and very achievable 🙂 Also strategy@risk and risk strategy are two very different things