Internal monitoring obligations require depositories to maintain adequate mechanisms for reviewing and evaluating control systems. Regulation 48 requires every depository to maintain adequate mechanisms for internal monitoring, review and evaluation of its systems, controls, procedures and safeguards, enabling ongoing assessment of the control environment and timely corrective measures.