[zxv]

Your examples, compliance and audit, can be powerful in helping distill risk management issues and communicate them; however, also consider that, in high risk environments that doesn't make it incompatible with other forms of collaboration on risk.

Consider safety on oil rigs. There, collaboration on safety is a focal point of all-hands meetings every 12 hours.

Both top-down and bottom-up management can be effective, and a combination can be even more so.