It is even more surprising considering that the principles of sound risk management and controls have been promulgated and published globally, including by the Basle Committee and the Group of Thirty, and, in principle, they have fully been embraced by the industry.