Management conducts the enterprise risk management process annually with periodic interim updates, and discusses those findings with the board and reports regularly to the board on significant risk categories.