. . "Depository institutions also possess compliance and operating risk such as the implementation of policies, procedures and controls required by the Bank Secrecy Act and U.S. Patriot Act." . . . . .