Establish a written policy and procedure over the issuance and deactivation of credit card.