The file review
Your supervisory body does not review your policy. It picks a matter and reads the file — what was checked on this client, against what, on which date, and who signed it off. A well-written procedure does not help if the file is thin.