While management is responsible for identifying and managing risks, the CRC facilitates the identification and assessment of critical risks, the development of mitigating actions and the monitoring of action plans.