An exposure to a client or group, after credit risk mitigation, may not exceed 25 % of Tier 1 capital; for institutions and investment firms the limit is the higher of 25 % and EUR 150 million (subject to a self-set reasonable limit not above 100 % of Tier 1 and to the non-institution part staying within 25 %), and a G-SII's exposure to another G-SII may not exceed 15 %. An exceptional breach must be reported without delay; the authority may allow limited time to comply, and where the breach lasts beyond three months the institution must present and carry out a plan for timely return to compliance. Exemptions (for example sovereign and intragroup exposures) and eligible mitigation follow Articles 399 to 403.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.