The competent authorities shall require that the risk-measurement model captures a sufficient number of risk factors, depending on the level of activity of the institution in the respective markets. As a minimum, the following provisions shall be respected ... for commodity risk, the risk-measurement system shall use a separate risk factor at least for each commodity in which the institution holds significant positions.
