The Board Operations and Technology Committee has overall responsibility for supply chain risks and the Global Outsourcing and Technology Sourcing Policy, while the Supplier Management Program is the responsibility of the Operational Risk Department which reports to the Chief Risk Officer.