Are Exogenous Risk Management Requirements Value- or Cost-Enhancing?