Internal controls: custodians must maintain measures preventing record manipulation and ensure safekeeping of client securities. Regulation 18 requires every custodian to have adequate internal controls to prevent manipulation of records and documents, including audits for securities, goods and rights or entitlements held for clients, and to maintain appropriate safekeeping measures to protect securities, goods, assets or documents from theft and natural hazards.