The Board must ensure that it receives adequate management information reports and exception reports to meet its oversight requirements to monitor adherence to the licensee’s risk tolerance/appetite/limits. The Board must regularly evaluate whether it is receiving the right balance of detail and quantitative versus qualitative information.