This led for example to improving the methodology for risk quantification in objective and straightforward: risk evaluation is now based on the importance of the risk (level of impact in terms of strategy, finance, operation, compliance and reputation) and the level of control in place to mitigate the risk.