As businesses, especially those that are regulated, we work hard to carry out risk assessments, but where are we with that and are these assessments informed, measured or validated?

Human behaviour is not so clearly influenced by rules as it is by norms. Perhaps our governance needs to refocus on norms?

True and honest leadership encourages others to lead. It is not selfish, it does not micromanage, and it is not restrictive. Leadership is a responsibility which surpasses all others and, whilst probably intangible and unmeasurable, provides others with opportunity and ownership. Being able to work with the possibility of uncertainty and affording our colleagues and peers the acceptance of failure without consequence, in my view, nurtures the creativity and openness needed

Compliance monitoring is probably an established method of assuring us of good management of regulatory risk. However, if your monitoring is not feeding your risk assessment, there is a fatal flaw.