COSO Principle 2: The board of directors demonstrates independence from management and exercises oversight of the development and performance of internal control
The board of directors identifies and accepts its oversight responsibilities in relation to established requirements and expectations
The board of directors defines, maintains, and periodically evaluates the skills and expertise needed among its members to enable them to ask probing questions of senior management and take commensurate action
The board of directors has sufficient members who are independent from management and objective in evaluations and decision making
The board of directors supplements its expertise relevant to security, availability, processing integrity, confidentiality, and privacy, as needed, through the use of a subcommittee or consultants.