REGULATORY TREATMENT OF RISK: MANAGEMENT AND ALLOCATION