• The board knows the extent to which management has established effective risk management in the organization • It is aware of and concurs with the entity's risk appetite • It reviews the portfolio view of risk and considers it against the risk appetite • Is apprised of the most significant risks and whether management is responding.