Look at your regulator's examination handbook - they normally cover all the points you would want to cover in your P&Ps. Also check out the OCC's interim exam guidance on FACT Act amendments to FCRA.
_________________________
My opinions are not legal advice and are worth what you paid for them.