In Hera, there is an appropriate separation between the role of risk control and management (entrusted to the risk owners in the various organisational units) and of evaluation of the appropriateness of the risk management processes.