Involve the risk organization in key decision-making processes.The risk management organization needs to be included in activities such as strategic planning, objective setting and incentives, financing decisions and performance management processes.