The Board must have rigorous controls for financial audit and reporting, internal control, and compliance with law.