The report cites «multiple examples of complacency throughout CBA [which] could be described
as a repetitive cycle of inertia» and said «one of the main drivers of the inconsistent influence of the risk function has been the amount of bureaucracy built up in CBA, resulting in risk management being perceived
as a
low priority «administrative
task».»