For chief risk officers at banking institutions, having the ear of the chief executive has proven necessary but not sufficient.
