They would have had a whole department though. If one specific role was required to avoid this then god help us.

It is not clear if this was a breach of US banking regulation though. Independent risk management functions within banks become a big thing after the 2008 financial crisis but it was up to countries how to implemented Basel recommendations.