RISK MANAGEMENT POLICIES AND PROCEDURES