Article 28 1.

Member States shall ensure that the management body of the investment firm approves and periodically reviews the strategies and policies on the risk appetite of the investment firm, and on managing, monitoring and mitigating the risks the investment firm is or may be exposed to, taking into account the macroeconomic environment and the business cycle of the investment firm.