In the case of incorporated insurance firms and insurance brokers, the Board of Directors must take responsibility for the establishment and oversight of effective risk management systems and controls.