Three lines of defenses should be set up in the bank risk-management,which are loss loan provisioning,capital adequacy and deposit insurance. A risk evaluation frame in the bank based on VaR should be founded to match the capital and risk more accurately.