Answer:that the organization lacks a good risk culture wherein employees have "buy in"
Explanation:
Continued shirks of Policies for self Benefit shows that the company lacks Risk management culture and some employees have "buy-in " i.e. they can mold the rules for their convenience.
Proper Risk Management includes
- Risk Avoidance: Companies should frame a strategy to deflect as many threats as possible to avoid the disruptive consequence of damaging event
- Risk sharing: Sometimes the effects of a threat are shared or spread among the participants or business units of several of the venture.
- Risk Retaining: Companies often determine that a risk is valid from business perception and plan to retain the risk and live with any potential consequences. Often, companies will retain a certain level of risk if the anticipated profit of a project is greater than the cost of their potential risk.
