Its responsibilities include ensuring that appropriate procedures are in place to identify and manage risks and establish risk tolerances; ensuring that appropriate policies, procedures and controls are implemented to manage risks; and reviewing the risk management process on a regular basis to confirm that it is functioning effectively.