The Board of Directors and senior management must ensure they possess the required competence, experience and skills to oversee, review and approve the key aspects of the licensee's security control process.