While building the bank's enterprise risk management system, a risk analyst takes an inventory of firm risks and categorizes these risks as market, credit, or operational. Which of the following observations of the bank's data should be considered unexpected if compared to similar industry data?