In the US banks have managed to pass laws so they're entitled only to upsides of risk taking but pass on all downsides to customers and the public.
(1) standard security protocol stuff: - identity: I am person X
- authentication: I prove that the person claiming to be X is actually X (in the US, this step is almost always skipped because, hey, they lobby government and you don't)
- authorization: the person that has been confirmed to be X has permissions to do the task they're attempting to do