FINRA Rule 3120 requires broker-dealers to establish a system to supervise activities of associated persons.What document must the supervisory system be memorialized in?