(a) The board of directors or a committee thereof shall review the savings association's interest-rate-risk exposure and devise a policy for the savings association's management of that risk.

(b) The board of directors shall formally adopt a policy for the management of interest-rate risk. The management of the savings association shall establish guidelines and procedures to ensure that the board's policy is successfully implemented.

(c) The management of the savings association shall periodically report to the board of directors regarding implementation of the savings association's policy for interest-rate-risk management and shall make that information available upon request to the OCC.

(d) The savings association's board of directors shall review the results of operations at least quarterly and shall make such adjustments as it considers necessary and appropriate to the policy for interest-rate-risk management, including adjustments to the authorized acceptable level of interest-rate risk.