The financial crisis has highlighted, among other things, the limits of risk management and the need to identify better solutions. An effective risk management system cannot only depend on a severe internal governance scheme, ignoring other entities potentially involved, such as public stakeholders. For this reason, the risk management unit should be more autonomous and could report directly to an external supervisor authority.
