Risk culture is a construct in which the organization's values, beliefs, and behaviors influence actions relative to how it responds to risks. By reducing complexity across the organization's functions and processes, the different types of risk can be assessed and managed by a single, powerful approach so that the risk culture is more mature.