The Bank establishes its risk appetite concerning third parties by performing a full risk assessment, highlighting the impacts on personal and confidential information, business continuity, client relations, reputation, compliance and information technology, as well as by thoroughly examining the service provider’s financial situation (financial statements, discussions, etc.) and practices, policies and information security environments (audit reports, security tests, etc.).