a summary of the strategies and processes used to manage each of the categories of risk listed in MIFIDPRU 8.2.1R and how this helps to reduce the potential for harm.
the firm’s approach to risk management by reference to its risk management policies;
details of the firm’s risk management structure and operations, for example, the senior management responsible for each area of risk (where applicable), and any relevant committees and their responsibilities;
how the firm sets its risk appetite; and
a summary of how the firm assesses the effectiveness of its risk management processes.