A CRISC practitioner reviews a business unit that consistently meets its financial targets but has repeatedly bypassed formal change-management approvals to accelerate product releases. Management informally rewards staff who 'get things done fast,' and employees perceive that raising control concerns will harm their careers. Which underlying factor is MOST important for the risk practitioner to address to improve control effectiveness in this unit?