An institution shall have sound administrative and accounting procedures and adequate internal control mechanisms for the purposes of identifying, managing, monitoring, reporting and recording all large exposures and subsequent changes to them, in accordance with this Regulation.