A C.D. Howe Institute study says OSFI’s single-head governance model hasn’t been reviewed in nearly 30 years