The Agency requires each bank incorporated in Bahrain to set out its policy and internal limits on large exposures, including exposures to individual customers, banks, institutions, countries and economic sectors, in a policy statement which should be formally adopted by the Board of Directors. The policy statement should be part of the risk management policy of the bank. The Agency expects banks not to implement significant changes in these policies without prior discussion with the Agency.