Risk management is not just about tools and techniques; it is about changing the corporate culture and the mindset of management and employees.

This change cannot happen overnight, risk managers need to start small by embedding elements of risk analysis into various decision making processes, expanding the scope of risk management over time.