When applicable, internal systems and controls must provide reasonable assurances that System institutions will:

(a) Follow and achieve business plan objectives and policies and procedures requirements regarding E-commerce; and

(b) Prevent and detect material deficiencies on a timely basis.