Article 13 2

(a)

a description of the identified shortcomings;

(b)

a description of the proposed remediation measures and of their prioritisation and expected completion, including, where relevant, measures to improve the identification, protection, detection and response capabilities;

(c)

a root cause analysis;

(d)

the financial entity’s staff or functions responsible for the implementation of the proposed remediation measures or improvements;

(e)

the risks associated to not implementing the measures referred to in point (b) and, where relevant, risks associated to the implementation of such measures.