Risks to banks – from inside and out