The Office of the Comptroller of the Currency found that nine major U.S. banks maintained broad reputational-risk policies that lacked clear, measurable standards and objective risk-based criteria