Former employee claims in lawsuit that she identified issues with risk-management practices