EFFICIENCY AND RISK MANAGEMENT IN BANKING FIRMS: A METHOD TO DECOMPOSE RISK*