Under the enterprise risk management framework, management is responsible for the day-to-day analysis and review of the risks facing Arrow, including timely identification of risk, a company-wide enterprise risk management survey, and risk controls related to significant business activities.