COSO: Effective Enterprise Risk Management – The role of the Board of Directors