The Board and management must take reasonable care to organise and control the affairs of the licensee responsibly and effectively with adequate risk management systems.