. "Any action taken by management, the board, and other parties to manage risk and increase the likelihood that established objectives and goals will be achieved." . . .