Board of Directors – The board should discuss with senior management the state of the entity’s enterprise risk management and provide oversight as needed. The board should ensure it is apprised of the most significant risks, along with actions management is taking and how it is ensuring effective enterprise risk management.
The board should consider seeking input from internal auditors, external auditors, and
others.