In order to mitigate these risks, Iberdrola has a Cybersecurity Risk Policy, approved by the Board of Directors, which provides the framework for the control and management of cybersecurity risks throughout the Group, promoting a strong cybersecurity culture for all levels of the organisation and assigning specific responsibilities at all businesses and corporate areas regarding the identification, protection, detection and response to cyberattacks and cybersecurity threats.