Traditional risk management (TRM) Chief risk officer (CRO)