(c)
paragraph 3 is replaced by the following: ‘3. Insurance and reinsurance undertakings shall have written policies in relation to at least risk management, internal control, internal audit, remuneration and, where relevant, outsourcing. They shall ensure that those policies are implemented. Those written policies shall be reviewed at least annually. They shall be subject to prior approval by the administrative, management or supervisory body and be adapted in view of any significant change in the system or area concerned. Small and non-complex undertakings may perform a less frequent review, at least every five years, unless the supervisory authority concludes, based on the specific circumstances of that undertaking, that a more frequent review is needed.’ ;
← (b) · All articles · (21) →
Source: EUR-Lex (Cellar) · retrieved 2026-10-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.