The CFO as Regulator of Risk