Internal controls and risk management As the highest management body, the Board of Directors is responsible for creating, maintaining and analysing the effectiveness of the internal control and risk management systems.