Which factor drives risk behavior and is typically measured by surveys, incident rates, governance metrics, and management conduct?

Which factor drives risk behavior and is typically measured by surveys, incident rates, governance metrics, and management conduct?

• A. Risk appetite
• B. Risk horizon
• C. Risk culture
• D. Control environment

Answer: (C)

The main idea being tested is how the shared attitudes, beliefs, and norms about risk shape how people behave within an organization. This is risk culture—the underlying driver of risk-taking and risk responses. It explains why people escalate issues, how they weigh potential harm, and whether risky decisions are taken or avoided. Risk culture is typically assessed with a mix of indicators: surveys that probe attitudes toward risk, incident rates that reveal actual risk outcomes and reporting behavior, governance metrics that show how oversight operates, and observations of management conduct in handling risk—tactors that collectively reflect how risk is perceived and acted upon across the organization. Other elements play important roles but don’t capture the behavioral driver as directly. Risk appetite describes how much risk the organization is willing to tolerate in policy terms, not the everyday behavior that emerges in practice. Risk horizon concerns the time frame used for planning and risk assessment. A strong control environment and governance structures influence behavior, but the key factor that explains the widespread patterns of risk-taking and risk reporting is the culture surrounding risk.

The main idea being tested is how the shared attitudes, beliefs, and norms about risk shape how people behave within an organization. This is risk culture—the underlying driver of risk-taking and risk responses. It explains why people escalate issues, how they weigh potential harm, and whether risky decisions are taken or avoided. Risk culture is typically assessed with a mix of indicators: surveys that probe attitudes toward risk, incident rates that reveal actual risk outcomes and reporting behavior, governance metrics that show how oversight operates, and observations of management conduct in handling risk—tactors that collectively reflect how risk is perceived and acted upon across the organization.

Other elements play important roles but don’t capture the behavioral driver as directly. Risk appetite describes how much risk the organization is willing to tolerate in policy terms, not the everyday behavior that emerges in practice. Risk horizon concerns the time frame used for planning and risk assessment. A strong control environment and governance structures influence behavior, but the key factor that explains the widespread patterns of risk-taking and risk reporting is the culture surrounding risk.