The Board is required to request sufficient information of its group members to allow it to address group risks.