a company's management team has presented a report to the Board of Directors about the effectiveness of the organization's new risk management program. However, the Board wants to ensure that the information presented is accurate and reflected the actual situation within the company . What is the best method for the Board to gain confidence that the statements made by management are justified