How long must a bank maintain the product criteria list used on file?
a) 3 years
b) 5 years
c) 7 years
d) 10 years