Formal factors relate to the tangible systems, processes, procedures, policies, committees and forums that exist within organisations as well as organisation structures, hierarchies etc - the design and implementation of these formal factors will affect many aspects of an organisation, including how risks are perceived and managed