The policy of the Risk Management and Internal Control System is the main internal document governing the risk management system and determines the general concept of the risk management process and respective employee obligations.