Unless specifically excluded in accordance with Paragraph AU-3.6.3, conventional bank licensees must arrange for their external auditor to report on the bank's compliance with the requirements contained in Chapter HC-5, at least once a year.