Risk models must have a regulatory role -