An idea... I would start with the risk officer and ceo