The risk management process is inclusive of all types of risks, from internal and external sources, including strategic, operational, financial and regulatory, as well as social, economic and environmental sustainability risks.