Good practice refers to what is currently accepted by the sector and regulators as meeting your legal responsibilities to manage risk.