On the enterprise risk management continuum, the is an organization's culture, the ethical principles and values that define the character of an organization, how the core team of leaders responsible for critical functions view risk, and the extent to which leaders of a company desire risk.

External environment

Governance structure

Internal environment

Control activity