Policy and implementation
The Board sets the policy on Internal Control and Risk Management that is implemented by management.