The CRO updates the Board on the key elements of the program, including organizational structure and oversight, monitoring and auditing, training and communications, investigations and discipline, policies, and risk management.