People risk and the role of the board