major roles and responsibilities of risk management committee