Banks must have clearly defined policies and procedures for determining which exposures to include in, and to exclude from, the trading book for purposes of calculating their regulatory capital, to ensure compliance with the criteria for trading book set forth in this section and taking into account the bank's risk management capabilities and practices. Compliance with these policies and procedures must be fully documented and subject to periodic internal audit.