ABSTRACT
Many risk managers find it difficult to obtain the required level of buy-in and investment from the organisation. This lack of engagement may be organisation-wide or from only certain business areas and levels. In these organisations, operational risk management is often seen as:
‘audit with another name’
‘just another overhead’
‘another layer of bureaucracy’
‘more work for me’
