Institutionalising restraint in business practice will prove challenging for HSBC and regulators alike, writes Justin O'Brien.
