What policies are regulatory required to have board approval?