“Risk Elements that Management Should Know and Boards Should be Asking”