Such policies and procedures need to address not only direct processing controls, but the training and self policing functions.
Certifications should be provided semi-annually, analogous to the control certifications required of a mutual fund's chief executive and chief financial officers on Form N-CSR.