To assist the Board to fulfill its duties and responsibilities under section 9621(a) of this title, the Corporation shall establish a risk committee and an audit committee.

Subject to the direction of the Board, the risk committee established under subsection (a) shall have oversight responsibility of—

(1) formulating risk management policies of the operations of the Corporation;

(2) reviewing and providing guidance on operation of the Corporation’s global risk management framework;

(3) developing policies for enterprise risk management, monitoring, and management of strategic, reputational, regulatory, operational, developmental, environmental, social, and financial risks;

(4) developing the risk profile of the Corporation, including a risk management and compliance framework and governance structure to support such framework; and

developing policies and procedures for assessing, prior to providing, and for any period during which the Corporation provides, support to any foreign entities, whether such entities have in place sufficient enhanced due diligence policies and practices to prevent money laundering and corruption to ensure the Corporation does not provide support to persons that are—

(A) knowingly engaging in acts of corruption;

(B) knowingly providing material or financial support for terrorism, drug trafficking, or human trafficking; or

(C) responsible for ordering or otherwise directing serious or gross violations of human rights.

Subject to the direction of the Board, the audit committee established under subsection (a) shall have the oversight responsibility of—

(1) the integrity of the Corporation’s financial reporting and systems of internal controls regarding finance and accounting;

(2) the integrity of the Corporation’s financial statements;

(3) the performance of the Corporation’s internal audit function; and

(4) compliance with legal and regulatory requirements related to the finances of the Corporation.

(Pub. L. 115–254, div. F, title IV, § 1441, Oct. 5, 2018, 132 Stat. 3503.)