1. Member States shall require all IORPs to have in place an effective system of governance which provides for sound and prudent management of their activities. That system shall include an adequate and transparent organisational structure with a clear allocation and appropriate segregation of responsibilities and an effective system for ensuring the transmission of information. The system of governance shall include consideration of environmental, social and governance factors related to investment assets in investment decisions, and shall be subject to regular internal review.

2. The system of governance referred to in paragraph 1 shall be proportionate to the size, nature, scale and complexity of the activities of the IORP.

3. Member States shall ensure that IORPs establish and apply written policies in relation to risk management, internal audit and, where relevant, actuarial and outsourced activities. Those written policies shall be subject to prior approval by the management or supervisory body of the IORP and shall be reviewed at least every three years and adapted in view of any significant change in the system or area concerned.

4. Member States shall ensure that IORPs have in place an effective internal control system. That system shall include administrative and accounting procedures, an internal control framework, and appropriate reporting arrangements at all levels of the IORP.