Risk management involves all parties in an organisation.

The Board is responsible for choosing the least risk products to promote.

The Board is responsible for maintaining a robust system of internal controls.

The Board is responsible for addressing any weaknesses in internal controls.

The Board is responsible for considering whether weaknesses in internal controls need to be addressed.

The Board is responsible for safeguarding the company's assets.