Article 28 5.

Member States shall ensure that the management body in its supervisory function and the risk committee of that management body, where a risk committee has been established, have access to information on the risks to which the investment firm is or may be exposed.