The management of uncertainty. The Basel Committee indicates that a sound risk management system should have active board and senior management oversight, appropriate policies, procedures and limits, comprehensive and timely identification, measurement, mitigation, controlling, monitoring and reporting of risks, appropriate management information systems (MIS) at the business and firm-wide level, and comprehensive internal controls.