77. Where the parent is a credit or financial institution and thus an obliged entity under …

Where the parent is a credit or financial institution and thus an obliged entity under Directive (EU) 2015/849, its management body should carry out at a minimum the following tasks:

• a) in order to have a cartography of the ML/TF risks to which each group entity is exposed, ensure that the group entities perform their own business-wide ML/TF risk assessments in a coordinated way and based on a common methodology, yet reflecting their own specificities, taking into account Article 8(1) of Directive (EU) 2015/849 and the EBA revised guidelines on ML/TF risk factors²⁷ ;
• b) when being informed, by members of the group management body or senior manager responsible for AML/CFT or directly by the group AML/CFT compliance officer, of supervisory activities carried out in entities of the group by a competent authority, or deficiencies identified therein, ensure that remediation measures are completed by the subsidiary or branch in a timely and effective manner.

4.3.3 Organisational requirements at group level

²⁷ EBA revised guidelines on ML/TF risk factors: EBA/GL/2021/02

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/