What it covers. What it doesn't. What your board should be asking.