Observations on OSFI’s "Culture and Behaviour Risk Guideline" (Draft) 2023 from an IT Perspective

Culture, in the common view of IT, is largely outlined in the strategy of the organization, expressed in part by the vision, mission, and objectives and described in detail in the principles the organization holds. Behaviors stem from the principles or values.