Sterling Financial suffered a $340 million trading loss when a single trader concealed unauthorized positions in currency derivatives for over 18 months. The firm's risk management system failed to detect the positions because the trader had access to both front-office and back-office systems. This event is best classified as which type of risk?