Creating a vision for risk management is an integral part of risk culture. Discuss how an organization that is just beginning to explore ERM might be able to start the process of developing a vision and aligning this with the culture within the organization. Please provide your references.