Precisely. Legally it is the Board which sets the policy of the company. The CEO executes it. The fact that the policy was probably written by the CEO doesn't change the position.
In the case, for example, of Carillion, it was the Board's decision to approve the accounts, continue to pay dividends etc, etc.