Portugal; risk management; operational risk; capital structure; reporting practices; risk disclosure; financial system; financial statements; commercial banking