[– risks that we accept as part of doing business , such as credit risk
 and market risk ; – risks that we incur as part of doing business , such
 as operational risk , which are actively managed to remain below an
 acceptable tolerance ; and – risks for which we have zero tolerance ,
 such as knowingly engaging in activities where foreseeable reputational
 risk has not been considered .]