Drivers of an organization’s risk culture

What are some examples of internal drivers of an organization’s risk culture? Resource allocation, risk attitude, risk appetite, risk tolerance, employee records What are some examples of external drivers of an organization’s risk culture? Political, social, economic, and technological How can an organization’s risk management function create organizational value?