discuss the the responsibilities of the board with regard to the last item on the list "ensuring effective risk management and internal controls