With the goal of linking the risk management process to planning and budgeting and normal business activities, ERG has thus defined the methodological criteria for mapping and evaluating risks, identifying roles and involved subjects and analysing the timeframes and mechanisms for coordination and reporting.