What are the pros and cons of having risk officers as part-time assignments within different functions and business units? What are the pros and cons of having risk officers as part-time assignments within different functions and business units?