Regulators could govern techniques for asset-risk calculation