Conventional bank licensees must have a clearly defined credit risk appetite statement which is implemented through comprehensive policies and procedures for limiting and controlling credit risk. Conventional bank licensees must also establish credit limits in a meaningful manner for different types of exposures, both on and off-balance sheet.