The board takes a hands-off approach, trusting the business to manage risk
17%
The board gets involved, but only when regulators do or an issue is raised
17%
The board actively sets a risk culture and cascades its policy to management
25%
The board is heavily involved and seeks increasing amounts of risk reporting
25%
Don't know
17%