Bryan’s Blog: Should Audit and Risk Committees be Separate?
Within an organisation, it is management’s responsibility to identify and manage risk and opportunity within a predefined risk appetite which has been established in consultation with the oversight body, most commonly a Board of Directors or an Advisory Board. Management is also responsible for reporting to the Board that risks and opportunities have been identified