What must the top management do to enable entities to manage and limit identified risks, and apply the same to all branches and affiliates in which they own the majority of shares?
The top management must set forth approved policies, controls, and internal procedures, review and continuously update them, and ensure their application to all branches and affiliates in which they own the majority of shares.