The board must have rigorous controls for financial audit and reporting, internal controls, risk management and compliance with the law.
