3.3_whin_risk_management_policy_and_plan_may_2015