The Board approves proposals for follow-up, and the highest-priority risks are then assigned to the business managers responsible for actioning, which is followed up by senior management and the Board’s Audit Committee.