From employee protection to consumer safety, risk management is a central daily duty of corporate management and has become top of the oversight agenda for corporate boards. While managers remain in charge of day-to-day risk management, the board’s oversight role has expanded so much that directors benefit from thinking broadly and deeply about how they