Establish an adequate internal policies and procedures for its operations, compliances, corporate governance and risk management, including its business continuity plan. These have to be regularly reviewed to ensure that they remain appropriate, relevant and prudent.