CHAPTER II – INTERNAL POLICIES, PROCEDURES AND CONTROLS OF OBLIGED ENTITIES Article 9 – Scope of internal policies, procedures and controls Article 10 – Business-wide risk assessment Article 11 – Compliance functions Article 12 – Awareness of requirements Article 13 – Integrity of employees Article 14 – Reporting of breaches and protection of reporting persons Article 15 – Situation of specific employees Article 16 – Group-wide requirements Article 17 – Branches and subsidiaries in third countries Article 18 – Outsourcing