The document outlines a risk governance framework with the CEO responsible for establishing systems to identify and manage risk. The Board reviews these systems and their effectiveness. The Risk & Audit Committee oversees risk management and reviews internal controls and risk management systems.