(12)The supervisory review and evaluation should take into account the size, the structure and the internal organisation of institutions and the nature, scope and complexity of their activities. Where different institutions have similar risk profiles, for instance because they have similar business models or geographical location of exposures or they are affiliated to the same institutional protection scheme, competent authorities should be able to tailor the methodology for the review and evaluation process to capture the common characteristics and risks of institutions with such same risk profile. Such tailoring should, however, neither prevent competent authorities from duly taking into account the specific risks affecting each institution nor alter the institution-specific nature of the measures imposed.