Article 5 4.

The controls shall be based primarily on risk analysis, with the purpose of identifying and evaluating the risks and developing the necessary countermeasures, and shall be performed within a common risk management framework in accordance with the criteria referred to in point (b) of Article 16(1) which shall also take into account the risk assessments established by the Commission and the FIUs under Directive (EU) 2015/849.