With regard to data management, the Identity and Access Management platforms govern the management of roles and privileges associated with users of the IT System, and data access by employees is governed by the Group’s provisioning process; the de-provisioning process ensures the cancellation of privileges when the conditions no longer exist.