The enterprises should have procedures supervising “covered parties,” up to and including monitoring their brokerage accounts.