risk to a bank that has outsourced its offsite backup media and record storage for many years to the same company and, because of familiarity, allows bank personnel to retrieve tapes without following formal procedures?