The Board must approve the risk management objectives, strategies, policies and procedures that are consistent with the Islamic bank licensee's financial condition, risk profile and risk tolerance. The risk management objectives, strategies, policies and procedures must be stated in a set of formal risk management documents. The risk management documents must be communicated at all levels within the Islamic bank licensee involved in the implementation of risk management policies (see Sections HC-1.2, HC-9.2, CM-2.1 and CM-4.7 for more detailed rules and guidance).