In conjunction with the Board, the Chief Executive Officer/General Manager must maintain a clear mapping of the risks faced by the business and document the organisational and other controls maintained to meet those risks.