Board of Directors – The board should discuss with senior management the state of
the entity’s enterprise risk management and provide oversight as needed. The board
should ensure it is apprised of the most significant risks, along with actions 
Executive Summary
management is taking and how it is ensuring effective enterprise risk management.
The board should consider seeking input from internal auditors, external auditors, and
others.