CMS Sept 2022

Internal Use Only

Policies and Risk Management • Sets the stage for bank oversight of key investment risks. • Remember setting the tone from the top.

• How do policies provide a framework to oversee and control these risks within the bank’s appetite?

• Is there a good feedback loop from treasury to the Board and senior management to ensure compliance?

31

Internal Use Only

Investment Security Classes US Government Securities US Government Agency Debt Mortgage Debt Municipals Corporate Debt

32