Risk management

(1) In addition to section 26(5), a pension fund's risk management system must also cover environmental, social, and governance risks, insofar as these risks are connected with the investment portfolio and its management. The risks covered by the risk management system are handled in a manner appropriate to the size and internal organisation of the pension fund, and to the scale, nature, extent, and complexity of its business activities.
(2) The risk management system must also take into account, from the perspective of the prospective and current beneficiaries, the risks that they bear under the terms of a retirement provision scheme.
(3) Pension funds must submit to the supervisory authority the reporting under section 26(1), first and second sentences, made to the management board, within one month of its submission to the management board. This duty does not apply to reporting submitted to the management board within the period of six months before and after the completion of an own-risk assessment under section 234d carried out for the entire risk profile. The supervisory authority may also exempt pension funds from the duty under the first sentence, wholly or in part, where this is compatible with the objectives of supervision.
(4) Section 26(3), (4), (6), (7), and (8), second and third sentences, does not apply.
(5) The own-risk assessment under section 234d belongs to the pension fund's risk management system. Section 27 does not apply.