This was a blog post that I wrote for Coupa:
Every company faces certain risks to their business, and every company has a culture around how they address them. While official responsibility for managing risk rests with executive leadership, and in large companies, a dedicated risk management function, the company’s risk culture often forms unintentionally, based on how these people behave.
Ahmad Sadeddin 