Risk management culture is a set of norms, values, and behaviors that prioritize risk management in an organization.