Competent authorities shall ensure that the risk that recognised credit risk mitigation techniques used by institutions prove less effective than expected is addressed and controlled including by means of written policies and procedures.