The practice of risk management and quality management is difficult. These practices rarely occur

The practice of risk management and quality management is difficult. These practices rarely occur unless specific mechanisms are put in place to ensure that high-level policies and pronouncements have substance.
How would you identify and define the key substantive mechanisms that you would expect to see emplaced that give substance to the integration of the practice of risk and quality management?