; (2) have any interest in an infrastructure project considered by the Board; (3) have any interest in an investment institution, commercial bank, or other entity seeking financial assistance for any infrastructure project from or investing in the Bank; and (4) have any such interest during the 2-year period beginning on the date such officer ceases to serve in such capacity. 209. Risk management committee (a) Establishment of risk management committee The Board shall establish a risk management committee consisting of 5 members, headed by the chief risk officer, with participation from the chief loan origination officer. (b) Appointments A majority of the Board shall have the authority to appoint and reappoint the CRO of the Bank. (c) Functions; duties (1) In general The CRO shall have such functions, powers, and duties as may be prescribed by one or more of the following: This Act, the bylaws of the Bank, and the Board. The CRO shall report directly to the Board. (2) Risk management duties In order to carry out the purposes of this Act, the risk management committee shall— (A) create overarching financial, credit, and operational risk management guidelines and policies to be adhered to by the Bank; (B) create conforming standards for loan agreements to ensure diversification of lending activities by— (i) geographic region, infrastructure project type, and inclusion of disadvantaged and rural communities; and (ii) compliance with Federal and State laws referred to in section 213; (C) create specific plans for all financial assistance provided by the Bank, including subsidy programs for disadvantaged communities and the inclusion of minority, women, indigenous people, and disadvantaged business participation in projects financed by the Bank in accordance with sections 201(18) and 213 of this Act; (D) monitor overall financial, credit, and operational exposure of the Bank