– risks that we accept as part of doing business, such as credit risk and market risk; – risks that we incur as part of doing business, such as operational risk, which are actively managed to remain below an acceptable tolerance; and –risks for which we have zero tolerance, such as knowingly engaging in activities where foreseeable reputational risk has not been considered.