The board’s role is regular oversight of the overall risk management process, including reviews of operational, financial, legal and regulatory, cybersecurity, compensation, strategic, competitive and ESG risks.