Non-financial Risk Management in the Financial Industry