Risk management bylaws