Annex 3: Requirements for the reporting in the MaRisk