(5)According to the first condition laid down in Article 5(6) of Regulation (EC) No 1060/2009, CRAs in a third country must be subject to authorisation or registration and subject to effective supervision and enforcement on an ongoing basis. The Mexican framework requires a CRA to be authorised and supervised by the Mexican Banking and Securities Commission (Comisión Nacional Bancaria y de Valores, CNBV) in order to operate and provide credit rating services. The CNBV is empowered to investigate any actions or issues that might constitute or could constitute a breach of the law. The CNBV has the power to request any type of information and documents, carry out on-site inspections and summon before it any person who might contribute to the investigation. CRAs can be permanently or temporarily barred, suspended or have their license revoked. The CNBV is empowered to impose administrative fines. The CNBV has implemented annual compliance reviews of the registered CRAs, and where needed, imposed sanctions. The cooperation agreement concluded between ESMA and CNBV provides for information exchange with regard to enforcement and supervisory measures taken against cross border CRAs.