1. Board should have needed expertise and be provided vital information 2. Strategy and risk appetite need to be well linked 3. Risk management should be considered as an independent function 4. Risk function should be strengthened with appropriate skills and talent 5. There should be clarity in risk management 6. Compensation and performance measures should be risk adjusted 7. Technology can make the needed difference