The bank had not put in place the system of periodic review of risk categorisation of accounts, as on 31 March 2019