Tone from the Top: Why It Matters More Than Any Framework

In my previous role as a Risk Officer at a local airline, I spent a fair amount of time developing and rolling out our Enterprise Risk Management (ERM) and Business Continuity Management (BCM) framework and policy. Getting the structure right is important. Clear governance, a defined risk appetite, escalation thresholds, and tested continuity plans all matter.