4.1 The PRA expects firms to have adequate risk management and controls specifically for buy-to-let lending, including:

(a) risk appetite limits on the flow and stock of buy-to-let lending, including ICR and loan-tovalue (LTV) limits;

(b) appropriate oversight and monitoring of the risk profile of lending introduced by third party intermediaries;

(c) monitoring of portfolio concentrations and high risk segments; and

(d) controls to ensure that any fraud risks associated with buy-to-let lending are effectively managed.