The board has overall responsibility for ensuring that risks are managed. In practice,
the board will delegate the operation of the risk management framework to the
management team, who will be responsible for completing the activities below. There
may be a separate function that co-ordinates and project-manages these activities and
brings to bear specialist skills and knowledge.