Prior to 2008, it was not uncommon for a bank to assign its risk oversight responsibilities to the audit committee of its board of directors, or in some cases, to even divide those tasks between a number of other committees.…