The risk assessments provide bankers with more flexibility to tailor security measures to better safeguard their customers . . . than would a mandate from regulators,