Principle 1: The board of directors should have responsibility for approving and periodically (at least annually) reviewing the credit risk strategy and significant credit risk policies of the bank. The strategy should reflect the bank’s tolerance for risk and the level of profitability the bank expects to achieve for incurring various credit risks.