As a risk analyst tasked with developing an enterprise risk management system for a bank, you have categorized the bank's risks into market, credit, and operational risk categories. Considering this classification and comparing the bank's data to industry standards within the same sector, which of the following observations would be considered atypical?