Culture is key to avoiding reputational risk