(5)Members of the management body have the ultimate responsibility for the institution, its strategy and activities and therefore are always able to have a material impact on the institution's risk profile. This applies both to the members of the management body in its management function who take decisions and to members of the supervisory function who oversee the decision making process and challenge decisions made.