During the last decade an implicit conceptual framework for internal control and corporate risk management has arisen from risk management practice and policy within UK companies. An explicit conceptual framework for risk management is now emerging and is expressed in the Turnbull Report. In this paper, we develop a diagrammatic representation for the conceptual framework for internal control, risk management and risk disclosure. We consider the recent practical and policy developments in the disclosure of risk-related information in order to establish the current state of the art of corporate risk disclosure. Thus, we focus only on the disclosure aspect of the conceptual framework for internal control. We use a questionnaire survey to canvas the attitudes of UK institutional investors towards risk disclosure in relation to their portfolio investment decisions. Our empirical findings indicate that institutional investors do not generally favour a regulated environment for corporate risk disclosure or a general statement of business risk. The respondents agree that increased risk disclosure would help them in their portfolio investment decisions. However, for other aspects of the risk disclosure issue they are more neutral in attitude. Further, we found that the variation in the attitudes of institutional investors appears to be associated with the characteristics of the funds they manage as well as with their investment horizons. Further, we find that institutional investors' perceptions of corporate governance are related to their investment horizons, among other factors. © 2000 Academic Press.