An Authorised Firm must have robust and effective processes in place for ensuring compliance with documented internal policies, controls and procedures concerning the operation of the risk measurement system to support the use of own-estimate haircuts.