The members of the board of directors should have which of the following responsibilities related to risk management:
I. The board must approve the firm's risk management policies and procedures.
II. The board must be able to evaluate the performance of risk management activities.
III. The board must maintain oversight of risk management activities.