Most companies providing with-profits funds are managing customer risk well but governance and the use of run-off plans needs to improve, the Financial Conduct Authority has said.