If a regulatory body has established and deposited money in an account in a bank, credit union, savings and loan association or savings bank, the regulatory body must establish written internal controls with respect to any withdrawals from the account, which must include, without limitation:
1. A system by which two or more members of the regulatory body conduct regular reviews of the expenditures made by the regulatory body and the supporting documentation for such expenditures. Each member who participates in such a review shall prepare a signed and dated attestation regarding his or her participation, which the regulatory body shall retain for its records.
2. A requirement that the regulatory body conduct a quarterly review of its financial statements, including, without limitation, a schedule of its disbursements.