The Board of Directors must take responsibility for the establishment and oversight of effective risk management and internal controls.