Listing in risk assessment is reasonable. Having the board approve them is an upward delegation of responsibility.
How would a board member know whether to vote "Yes" or "No?"
_________________________
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.