The Risk Committee of the Board oversees information technology activities and risks including information security risk assessment, strategy, policy, and framework, and disaster recovery, business continuity, and crisis management.