A covered banking entity must, for any quantitative measurement furnished to [Agency] pursuant to this appendix and ?? _.7, create and maintain records documenting the preparation and content of these reports, as well as such information as is necessary to permit [Agency] to verify the accuracy of such reports, for a period of 5 years.