Where a firm is a member of a consolidation group, the firm must
ensure that the risk management processes and internal control mechanisms at
the level of the consolidation group of which it is a member comply with the
obligations set out in the risk control rules on a consolidated basis (or a
sub-consolidated basis).