Does your company have a board-level risk committee?