What access control measures do I need to consider when making an application to become authorised as an Electronic Money Institution (EMI)?

There are a range of obligations and the application will need to address how the business will impose controls around sensitive payment data flows, access rights, monitoring tools, and sensitive data storage amongst other things.