Why You Don’t Know Your Bank’s Risk Profile