Directors and employees representing a cross-section of functions and management levels, including the Audit Committee, rank risks according to impact (inherent risk) and our vulnerability (mitigated risk).