163. The responsible function within a relevant institution should carry out the suitability assessment of key function holders before their appointment and should report the assessment results to the appointing function and the management body. Significant CRD institutions, referred to in paragraph 172, should inform competent authorities of the assessment results regarding heads of internal control functions and the CFO, where they are not part of the management body.
164. If a relevant institution's assessment concludes that a key function holder is not suitable, the relevant institution should either not appoint the individual or take appropriate measures to ensure the appropriate functioning of this position. Significant CRD institutions should inform the competent authority accordingly with regard to the heads of internal control functions and the CFO, where they are not part of the management body. Competent authorities may require such information from all relevant instituti