Which of the following tasks regarding risk appetite would be reasonably performed by an organization's Board of Directors?

I. Develop the organization's risk appetite statement.

II. Determine if the risk appetite may cause risks in other areas of the organization.