US regulator cites ‘terrible’ risk management for SVB failure