12 CFR 1233.4: Internal controls, policies, procedures, and training.

(a) In general. Each regulated entity shall establish and maintain adequate and efficient internal controls, policies, procedures, and an operational training program to discover and report fraud or possible fraud in connection with the purchase or sale of any loan or financial instrument.

(b) Examination. The examination by FHFA of fraud reporting programs of each regulated entity includes an evaluation of the effectiveness of the internal controls, policies, procedures, and operational training program in place to minimize risks from fraud and to report fraud or possible fraud to FHFA in accordance with this regulation.