The risk-taking Units (e.g. credit Units, Treasury) are responsible for assessing and minimizing risks related to them for a given level of expected return by establishing and applying internal rules and controls to the ongoing business.