The Board and senior management must ensure that a strong risk culture and governance policy underpins the effective use of stress testing.