Although the Corporation’s organisational chart states that there should be a Risk Management Department, it has not yet been staffed because of the lack of suitable staff, coupled with restrictions of new recruitments.