An ERM framework can have perfect documentation, but if the corporate culture encourages employees to cut corners, systemic risk failures will eventually occur. Building a strong risk culture requires clear accountability and balanced incentive structures. [1, 2]
The Corporate Risk Culture Spectrum
Risk teams use behavioral metrics to evaluate how well risk awareness is integrated into daily decisions:
[Pathological Culture] ---> Metrics are hidden; risk management is seen as an obstacle.
          |
          v
[Reactive Culture]     ---> Risk adjustments occur only after a major loss event.
          |
          v
[Calculative Culture]  ---> Focuses heavily on check-lists and strict numeric compliance.
          |
          v
[Proactive Culture]    ---> Risk metrics are actively integrated into strategic choices.

To reinforce a proactive culture, companies link executive bonuses to risk metrics through malus and clawback provisions. These tools allow the board to reduce or recover past bonus payouts if an executive’s decisions lead to unauthorized risk exposure or financial losses.

Â