Risk Culture and Risk Management as Drivers of Organizational Performance: A Conceptual Framework for the UAE Public Sector

Public sector organizations operate in an era marked by rapid change and persistent uncertainty.They are expected to remain resilient and accountable while navigating complex technological, economic, and socio-political risks.Although global frameworks such as COSO (2004) and ISO 31000 (2018) provide structured guidance for risk governance, less is known about how risk culture the values, assumptions, and everyday behaviors that shape attitudes toward risk conditions the effectiveness of risk management and, in turn, organizational performance in the United Arab Emirates (UAE).This conceptual paper synthesizes prior research on risk culture, risk management, and performance and proposes an integrated framework grounded in contingency theory and the enterprise risk management (ERM) perspective.We argue that an adaptive, learning-oriented risk culture enables disciplined risk management practices that translate into stronger organizational outcomes in the public sector.Viewing risk culture as a strategic capability clarifies its role in supporting governance excellence and suggests avenues for empirical validation within the UAE's evolving institutional landscape.