board‑level technology risk