When we ask Chief Risk Officers (CROs) what they are worried about, they usually mention specifics like geopolitical risk, credit risk, and cybersecurity risk. But their biggest blind spot is often the most important factor that influences how these risks are managed: culture.