Duty of Care Risk Analysis (DoCRA). A quick review how banks and financial services organizations can use Duty of Care Risk Analysis to establish reasonable risk and appropriate security controls. Define your mission, objectives, and obligations to determine what is reasonable security.