According to , page 4, a holistic approach to risk management is ''one that considers all sources and types of risks across all organizational units and activities''.It aims to integrate governance, strategy, performance, culture and ethics into a coherent framework for managing uncertainty2.