– Board of Directors & Audit Committee Reviews periodic reports on top risks, mitigation plans and ERM program design and approves Management’s approach and strategy concerning specific business risks, as well as relative risk tolerance overall. – Executive Leadership Team Allocates resources for ERM program design and activities addressing business risks; sets priorities for assessing and mitigating various risks.