Each separate legal entity to which the bank is exposed must be separately rated. A bank must have policies acceptable to CBB regarding the treatment of individual entities in a connected group including circumstances under which the same rating may or may not be assigned to some or all related entities.