risk management in card activities