‘Risk governance’ or ‘risk oversight’ (I see the terms as synonymous) is a topic that comes up quite often in governance codes, regulator and investor group guidance, and (of course) in risk management frameworks.
But is it something that boards should be doing? Should they be providing oversight on risk?
Maybe they should, but perhaps not in the way that most have been doing it- and I would prefer a different description.
A 2012 article by Matteo Tonello of The Conference Board (based on an article by Tim Leech) references a National Association of Corporate Directors Blue…
