A firm must address and control, by means which include written
policies and procedures, the risk that recognised credit risk mitigation
techniques used by it prove less effective than expected.

[Note: Art 80 of the CRD]