Your examples, compliance and audit, can be powerful in helping distill risk management issues and communicate them; however, also consider that, in high risk e

Your examples, compliance and audit, can be powerful in helping distill risk management issues and communicate them; however, also consider that, in high risk environments that doesn't make it incompatible with other forms of collaboration on risk. Consider safety on oil rigs. There, collaboration on safety is a focal point of all-hands meetings every 12 hours. Both top-down and bottom-up management can be effective, and a combination can be even more so.