Roles and responsibilities of risk management committee