The paper describes the essential elements of a sound internal control system. The principles set out in the paper are intended to be of general application and supervisory authorities should use them in assessing their own supervisory methods and procedures for monitoring how banks structure their internal control systems.