action, the policies, procedures, and controls should prohibit the CRA and its employees from selectively disclosing information about the pending credit rating action, except to the rated entity, obligor