On the first level, the risk assumption units (e.g. business units, the Treasury Division) are responsible for evaluating and mitigating risks to a predefined level of anticipated performance, by establishing and applying new internal regulations during the course of their work.