On the Role of the Chief Risk Officer and the Risk Committee in Insuring Financial Institutions against Litigation