The Agency will need to be satisfied that adequate control systems are in place to ensure that risks taken in the group as a whole are properly monitored and controlled.