Whether they’re volunteer board members or C-suite employees, they become legally liable for responding to claims.