Which of the following are true of an effective risk management culture?

Staff should be penalised for being associated with negative events.

All risk should be eliminated.

Responsibility for risk management should be devolved to a risk manager.

All staff should be aware of risks affecting the entity.

Risk management should be regarded as part of the overall business strategy.

The directors should take an active interest in risk management.