Event Details
Time: 12:30pm - 1:30pm AEDT
Date: 2 December 2025
Venue: Online
Registration Fee: Free
About the Event
Organisational culture shapes how risk is perceived, communicated, and managed – yet until now, few tools have effectively measured it. The Organisational Risk Culture Standard (ORCS) is a world-first framework designed to help organisations understand, assess, and strengthen their risk culture in a structured and evidence-based way. Developed by leading experts in risk and behavioural science, the ORCS bridges the gap between governance, leadership, and human behaviour, offering practical guidance for boards, executives, and risk professionals.
In this session, Jack Jones and Dr Paul Johnston – two of the ORCS authors – will share insights on the development and real-world application of the standard. Hosted by Simon Levy, CEO of RMIA, the discussion will explore how the ORCS empowers organisations to turn risk culture into a strategic advantage and create more resilient, high-performing teams. Learn more about the ORCS at www.riskculture.org.
About the Speakers
Jack Jones
Risk Management Executive, Co-Author of the ORCS
Jack has over thirty-seven years of experience in cybersecurity, ten years of which as a CISO. He created the “Factor Analysis of Information Risk” (FAIR) and FAIR-CAM models which have been adopted as international standards for risk measurement. Jack’s also won several industry awards, including a Lifetime Achievement award. In 2016, Jack co-founded the FAIR Institute, which is an award winning, global non-profit dedicated to advancing the field of risk management.
Currently, Jack teaches in Carnegie Mellon University’s CISO executive program and provides strategic guidance to companies. https://riskculture.org/authors/jack-jones/
Paul Johnston
Behavioural Scientist and Risk Management Specialist, Co-Author of the ORCS
National Practice Lead (Risk Management Capability & Culture) for the Risk 2 Solution Group, Dr Paul Johnston FARPI FISRM ChFInstP ChOHSP CMAS RPP MATMA is a Behavioural Scientist with over 30 years of HSES (Health, Safety, Environment & Security) risk management experience in both the public and private sectors. Holding a PhD in Public Safety Risk Management, a Graduate Certificate in Occupational Hygiene Engineering, and a Bachelor of Behavioural Science, Paul has provided operational, management system consulting, research & analysis, and training/facilitation services to a wide range of industry groups throughout Australia and internationally.
A self-confessed “pracademic”, Paul is also the Academic Lead for the Institute of Presilience, as well as being a senior researcher with the ASRC (Australian Security Research Centre), and is the Editor of the ISRM (Institute of Strategic Risk Management) Journal. https://riskculture.org/authors/dr-paul-johnston/
Simon Levy
Chief Executive Officer, RMIA
Simon has 20 years of experience as a risk professional and has collaborated closely with senior executives for globally recognised brands and organisations contributing to strategic intent by ensuring accountability for effective risk mitigation.