In assessing whether “strong systems and reporting capabilities are in place”, well documented policies, procedures and risk management controls, as well as strong systems and reporting capabilities, may be substantiated by a third- party review for sellers that are non-banking entities.
