The need for banks to implement cultural and conduct changes is fundamental to the safety and soundness of the financial system. Banks have to play an active role in this process: the risk culture should indeed be «in» the business and not just in the controls that are not necessarily a proxy of culture.