The Corporation's board of directors must approve the overall risk-appetite of the Corporation and regularly monitor internal controls to provide reasonable assurance that risk-taking activities are conducted in a safe and sound manner.