Although the Corporation’s organisational chart states that there should be a Risk Management Department, it has not yet been staffed because of the lack of suitable personnel, which is coupled with restrictions on the Corporation’s ability to hire new recruits.