2.4. Principle 4—Concentration Risk

A Bank must have adequate policies to identify, measure, evaluate, manage and control or mitigate concentrations of risk in a timely way.