c. Risk Committee and Chief Risk Officer
1) Larger entities may wish to establish a risk committee composed of directors that also includes managers, the individuals most familiar with entity’s processes.
a) A Chief risk officer (CRO) may be appointed to coordinate the entity’s risk management activities, The CRO is a member of, and reports to, the risk committee.