Conventional bank licensees must have in place a Board approved policy to develop, review and implement an internal risk rating system. Such a system must be able to assign a credit risk rating or scoring to obligors that accurately reflects the obligors’ risk profile and likelihood of loss.