in a good risk management process, the duties of chief risk officer (cro) least likely include: a. setting the risk tolerance of the organization. b. participating in the key strategic decisions of the organization. c. building the risk framework for the organization.