Many of these policies are regularly reviewed and approved by the Audit and Risk Committee while others are overseen by the Enterprise Risk Management Committee or one of the other specialized risk committees.