Risk culture: The values, beliefs, knowledge, attitudes, and understanding of risk shared by a group of people with a common purpose, in this case, an organization. This includes the rules and safety measures set in place to address potential risks, as well as the attitudes towards risk-taking. An effective risk culture promotes an environment where proactive and responsible risk management is part of everyone’s daily activities.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index