» Organizational structures and policies themselves can serve as risk controls. Segregation of duties, independence of control functions from business lines, and the use of committees or other, more informal approaches for breaking down silos between business units or departments are among a variety of organizational practices that may facilitate effective risk management. Although there is a tension between segregating functions and breaking down silos to facilitate information exchange, risk management requires a bit of both
