It outlines the requirement for each business unit (BU) to recognise key risk areas affecting their operations and to classify the impact and likelihood of these risks in a register for prioritisation and management by both BU and the Group.