. "t and includes appropriate management review of trading limits, strategies, hedging activities, investments, incentive compensation and other matters identified in this part or by management as requiring attention;(4) Independent testing and audit of the effectiveness of the compliance program conducted periodically by qualified personnel of the banking entity or by a qualified outside party;(5) T" . . . . .