gao systemic risk exception