We have a formal framework for risk management policies in place, which sets out approaches to managing different types of risks and defines the minimal control standard over the short, medium and long-term.