What is Risk culture?

Risk culture is the set of norms, attitudes and behaviours in a firm that decide how risk is taken and controlled in practice: whether limits are treated as binding, whether bad news travels up quickly, and whether those who object are heard.