Recognition shall only be given if the competent authority is satisfied that the institution's risk-management system is conceptually sound and implemented with integrity and that, in particular, the following qualitative standards are met ... the institution frequently conduct a rigorous programme of stress testing and the results of these tests are reviewed by senior management and reflected in the policies and limits it sets ...