Article 86 2.

The strategies, policies, processes and systems referred to in paragraph 1 shall be proportionate to the complexity, risk profile, scope of operation of the institutions and risk tolerance set by the management body and reflect the institution’s importance in each Member State in which it carries out business. Institutions shall communicate risk tolerance to all relevant business lines.