Mapping risk culture

What is risk culture and how can it be measured and improved?