What does it mean to state that risk management is an expression of an organisation’s values? This article discusses the basis for identifying the connection between organisational values through the lens of ethical business culture and attempts to draw out linkages with current risk management thinking. The approach described allows an analytic approach to risk management to be inserted into an ethical assessment method