Recognition shall only be given if the competent authority is satisfied that the institution's risk-management system is conceptually sound and implemented with integrity and that, in particular, the following qualitative standards are met: ... the process the institution employs for approving risk-pricing models and valuation systems that are used by front and back-office personnel ...