Identifying, monitoring and controlling the common types of risks within and across affiliates, subsidiaries, lines of business or jurisdictions

Understanding how policies and procedures mesh with risk appetite statements and reduce residual risks

Reviewing key areas for board consideration and senior management action, including whether to use risk acceptance or avoidance policies