1. In assessing whether the risk management processes and internal control mechanisms of the parent undertaking cover the subsidiary in accordance with point (b) of Article 236 of Directive 2009/138/EC, the group supervisor and the other supervisory authorities concerned shall consider whether all of the following criteria are met:

(a) the risk management function referred to in Article 44(4) of Directive 2009/138/EC is carried out, in respect of the subsidiary, to a significant extent by the parent undertaking, in such a way that the parent undertaking carries out most of the tasks of the risk management function listed in Article 269 of this Regulation;

(b) the compliance function referred to in Article 46 of Directive 2009/138/EC is carried out, in respect of the subsidiary, to a significant extent by the parent undertaking, in such a way that the parent undertaking carries out most of the tasks of the compliance function listed in Article 270 of this Regulation;

(c) the requirements on outsourcing set out in Article 49 of Directive 2009/138/EC are complied with by the subsidiary in relation to the risk management and compliance activities carried out by the parent undertaking.