The risk committee should create a clear delineation between risk management by front-line teams and risk oversight conducted by the risk function.