Effective risk management and internal control systems require a clear identification and allocation of roles and responsibilities across the issuer’s operations. It starts with the issuer’s board which is ultimately responsible for the oversight of the issuer’s risk management and internal control systems, and continues with the management which implements the board’s plans in the issuer’s day-to-day operations.