All actions aimed at controlling and mitigating risks shall conform to the following main principles of conduct, among others: a) Segregate functions, at the operating level, between risk-taking areas and areas responsible for the analysis, control and monitoring thereof.