Whether the board or audit committee understands and exercises oversight responsibility over financial reporting and internal control.

FORBES: JP Morgan Chase Named A New Chief Auditor (For Corporate!); Can You Name Him?

Establish a board Risk Committee (separate from the Audit Committee) and assign it responsibility for enterprise risk (including IT risks).

FORBES: It's Time For The Security Industry To Step Up And Play Offense

The Groupon-Facebook dichotomy, in which one accounting firm was responsible for two dramatically different approaches to GAAP, demonstrates the need for actual people at accounting firms taking personal as well as corporate responsibility for the financial statements that they audit.

FORBES: Facebook's Biggest Surprise -- No Funny Numbers