Whilst it is difficult to anticipate every contingency the board and management should be well prepared to handle a crisis. The board and management should have an agreed view on the organisation’s appetite for risk and ensure that the organisation has a comprehensive and effective risk management system that is appropriate to its circumstances. The board should also ensure that the organisation has effective compliance procedures, an effective internal control system and that it receives appropriate information on how the organisation’s risks are managed.