With Dodd-Frank turning three, where are we now? Some contend that is not more regulation that we need but rather proper risk management by these behemoth institutions. That cannot be delegated, regulated or legislated. It needs to happen from within.