Article 28 3.

For the purposes of paragraph 2, IORPs shall have in place methods to identify and assess the risks they are or could be exposed to in the short and in the long term and that may have an impact on the IORP's ability to meet its obligations. Those methods shall be proportionate to the size, nature, scale and complexity of the risks inherent in its activities. The methods shall be described in the own-risk assessment.