Board coordination is the key.
Many utility CEOs are happy to pass off risk-management policy to the CFO and the head of the trading desk. After all, with deregulation and re-regulation, collapsing spark spreads, hypersensitive rating agencies, and nervous investors, there is enough to worry about. So what's the problem? If the financial guys control and report the risks and profits and losses (P&L) within risk tolerances, why should the CEO be concerned about risk management?