The Turnbull report recommends that when determining internal controls, boards should consider the ---- and ---- of risks that it regards as acceptable for the company to bear.
Both are important; board shouldn't just consider overall acceptable risk levels, but categorise risks carefully and decide what level of risk is acceptable for each major risk.
