What records should the monitoring programme generate? Under what circumstances should findings be reported to the FCA proactively, and in what form?