Risk management process
Article 5
1. The proposer shall be responsible for applying this Regulation, including the assessment of the significance of the change based on the criteria in Article 4, and for conducting the risk management process set out in Annex I. 2. The proposer shall ensure that risks introduced by its suppliers and its service providers, including their subcontractors, are also managed in compliance with this Regulation. To this end, the proposer may require through contractual arrangements that its suppliers and its service providers, including their subcontractors, participate in the risk management process set out in Annex I.