Article 12 3.

The inherent and residual risk profiles of an obliged entity assessed pursuant to paragraph 1 shall be classified by the Authority as low, medium, substantial or high, based on the benchmarks and following the methodology set out in the regulatory technical standards referred to in paragraph 7. Where the assessed obliged entity is part of a group of credit institutions or financial institutions, the risk profile shall be classified at group-wide level.