How Boards Manage Risk – With and Without Insurance