An Authorised Person must undertake on-going monitoring of its systems and controls to ensure that they are operating effectively and as intended and remain appropriate.