It should be standard practice for a bank's management to establish policies and procedures to manage risks arising out of its activities. The bank should maintain written policies and procedures that identify the risk tolerances of the Board of Directors and should clearly delineate lines of authority and responsibility for managing the risks. Banks' employees should be fully aware of all policies and procedures that relate to their specific duties.