99. When assessing the risk management framework, competent authorities should consider the extent to which it is embedded in, and how it influences, the overall strategy of the institution. Competent authorities should, in particular, assess if there are appropriate and consistent links between the business strategy, the risk strategy, risk appetite and risk management framework, and the capital and liquidity management frameworks.
100. When reviewing the risk strategy, risk appetite and risk management framework of an institution, competent authorities should assess whether:
a. the responsibility of the management body in respect of the risk strategy, risk appetite and risk management framework is exercised in practice by providing appropriate direction and oversight;
b. the risk strategy and risk appetite consider all material risks to which the institution is exposed and contain risk limits, tolerances and thresholds;
c. the risk strategy and risk appetite are consistent and imple
…