which of the following is a risk management protocol for Banks?