An Authorised Person must establish and maintain arrangements to provide its Governing Body and senior management with the information necessary to organise, monitor and control its activities, to comply with legislation applicable in the DIFC and to manage risks. The information must be relevant, accurate, comprehensive, timely and reliable.