Many organisations, across a variety of sectors and industries, are realising the benefits of investing in risk culture and how effective a strong risk culture can be as a key strategic enabler. This has led to numerous organisations performing risk culture assessments to understand their current risk culture and behaviour, and now many are considering how they objectively measure, monitor and report risk culture on an ongoing basis. However measuring risk culture is proving to be a more challenging task for organisations, and there are a range of views to risk culture metrics and approaches across the market – including the use of the word metrics itself. Some feel they are indicative rather than precise or complete.
What is clear is the benefits of monitoring risk culture and periodically engaging with key stakeholders the learnings and on their role (e.g. Executive and Board). This provides insights into the effectiveness and alignment of strategies supporting a strong risk culture, the extent to which risk mindsets and behaviours are shifting over time, and identifies areas where course correction may be needed. A set of risk culture metrics or indicators also act to help identify and anticipate emerging threats to a strong risk culture.
To help organisations navigate this challenge, we have identified some common design principles to think about when developing risk culture metrics or indicators as well as some common challenges we are seeing across the market.
Download the full report to learn more about:
Sophie Langshaw
National Leader, Internal Audit Services, PwC Australia
Tel: +61 410 520 548
© 2017 - 2025 PwC. All rights reserved. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details. Liability limited by a scheme approved under Professional Standards Legislation.