The Corporation's board of directors must approve the overall risk-appetite of the Corporation and regularly monitor internal controls to provide reasonable assurance that risk-taking activities are conducted in a safe and sound manner.
12 C.F.R. §653.2