The fact is that middle managers have an effective veto power over whatever risk management system is created. If they don't buy it, it won't happen.
Adrian J. Slywotzky, Karl Weber (2007) The Upside: The 7 Strategies for Turning Big Threats into Growth Breakthroughs. Crown Business, London. p. 219.