As part of the firm’s risk identification process, each line of business and corporate function is responsible for the ongoing identification of risks as well as the design and execution of controls to manage those risks.