How to spot culture risks at your company when you can still fix them