Article 123 2.

Competent authorities shall require institutions to have in place adequate risk management processes and internal control mechanisms, including sound reporting and accounting procedures in order to identify, measure, monitor and control transactions with their parent mixed-activity holding company and its subsidiaries appropriately. Competent authorities shall require the reporting by the institution of any significant transaction with those entities other than the one referred to in Article 394 of Regulation (EU) No 575/2013. Those procedures and significant transactions shall be subject to overview by the competent authorities.