Recent U.S. court rulings make it clear that relying on management’s discretion is not enough for board risk governance.
Recent court rulings make clear that boards need a documented, reliable process for receiving risk information, and internal audit can help test whether that process is meaningful and defensible.