This company currently does not have a board risk committee. Its Audit Committee Chairman would like to propose to the board of directors the formation of a board risk committee, and to formalize its risk management practices across the company.
What should the risk framework be?