Arrow’s CEO has the ultimate management authority for enterprise risk management, including responsibility for capability development, risk identification and assessment, and policies and governance, as well as strategies and actions to address enterprise risk.