A newly appointed CRO discovers that while the enterprise has a documented risk management framework, business unit managers routinely treat risk activities as the sole responsibility of the risk function. Incidents are frequently escalated late because managers do not see risk identification as part of their day-to-day duties. The CRO wants a sustainable governance change to correct this behavior. Which action would MOST effectively address the root cause?