Who can fine

The risk manager isn't going to find themselves. Also changed duties to responsibilities so that it is consistent with the header for the next section.