implementation of appropriate risk management and resource allocation by their board of directors and executives that is practical and meets the standards established by an international organization concerning