When applicable, internal systems and controls must provide reasonable assurances that System institutions will:
(a) Follow and achieve business plan objectives and policies and procedures requirements regarding E-commerce; and
(b) Prevent and detect material deficiencies on a timely basis.