In turn, the supervision of institutions must be intrusive, with a strong on-site component – thereby ensuring an active presence in the institutions under supervision. It must also rely on ITC-intensive use, in order to optimise distance regular monitoring procedures, and shall be based on risk.
Its purpose is thus to ensure the timely detection of vulnerabilities and to guarantee opportune and effective supervisory action, imposing corrective measures where necessary, and sanctioning non-compliances.