«If you're an insurance company or big
bank, there is a framework there — you must have a chief risk officer and you have to have a risk structure in place; but for all the operational companies like VIA, it's up to the board
of directors or
upper management to decide to go ahead with risk
management structure.»