Naomi Burley considers the implications of the Royal Commission what needs to change with organisations' attitudes towards risk and compliance.