Is the risk management committee only a procedural compliance