Banks' risk culture and management control systems: A systematic literature review

Over ten years of a debate about the best ways to make banks safer have led to the conclusion that improving their risk culture is one venue to achieve this goal. Consequently, different disciplines discuss topics related to risk culture from varying methodological angles. This effort of many scholars provides a rich basis of theoretical and empirical evidence to guide business practice and improve regulation. However, the application of many approaches and methods can result in fragmentation and loss of a comprehensive perspective. This paper strives to counteract this fragmentation by providing a comprehensive perspective focusing particularly on the embeddedness of risk culture into banks' management control systems. In order to achieve this goal, we apply a systematic literature review and interpret the identified findings through the theoretical lens of management control research. This review identifies 103 articles, which can be structured along three categories: Assessment of risk culture, relation between risk culture and management controls (with the subcategories embeddedness of risk culture in overall management control packages, risk culture and cultural controls, risk culture and action controls, risk culture and results controls, as well as risk culture and personnel controls) and development of banks' risk culture over time. Along these categories the identified findings are interpreted and synthesized to a comprehensive model and consequences for theory, business practice and regulation are derived.

Automated summary

Over the course of more than a decade, discussions on enhancing banks' safety have highlighted the importance of improving their risk culture. Various disciplines have contributed to this debate from different perspectives, providing theoretical and empirical support for business practices and regulatory improvements. This paper aims to counteract fragmentation by offering a comprehensive perspective on the embedding of risk culture into banks' management control systems through a systematic literature review.