A risk-aware culture at a business is characterized by