A large bank's internal auditor is reviewing the institution's economic capital framework to ensure compliance with industry best practices. During this assessment, the auditor identifies deficiencies in the bank's governance structure as well as in the methodology used for calculating the firm's overall economic capital. In response, the auditor asks the Chief Risk Officer to suggest corrective actions that conform to established best practices.