Which of the following best defines 'risk culture' within an organization?
-
A
The formal risk policies documented in the employee handbook
-
B
The shared values, beliefs, and behaviors that shape how employees identify and manage risk
-
C
The number of risk incidents reported annually
-
D
The risk management software used by the compliance team