Regulation (EU) 2017/2402 (the EU Securitisation Regulation) entered into force on 18 January 2018 and applied in the EU as of 1 January 2019. This Checklist sets out the requirements for due diligence, risk assessment and ongoing monitoring which apply to institutional investors in the EU Securitisation Regulation. Due diligence, risk assessment and ongoing monitoring requirements for institutional investors Investors in securitisations are exposed to both: • the credit risks of the underlying exposures, and • risks arising from the process of structuring the securitisation such as agency risk, model risk, legal and operational risk, counterparty risk, servicing risk, liquidity risk and concentration risk The EU Securitisation Regulation requires institutional investors (and in one case the sponsor) to carry out: • due diligence procedures and a risk assessment prior to holding a securitisation position, and • ongoing monitoring of the securitisation positions that it holds An institutional investor is an investor which is one of the following: • an insurance undertaking as defined in Article 13(1) of the Solvency II Directive 2009/138/EC