Risk management, corporate governance, and bank performance in the financial crisis