According to the risk policy, any risk that exceeds this permissible level, should be the target of actions to achieve said value, in as far as the risk be manageable and the management costs are proportionate to the effect of the risk avoided.