The credit risk rating/scoring process must appropriately group credit exposures on the basis of shared credit risk characteristics.