Banks' management must establish written policies and procedures to manage the risks arising out of banks' activities.
