On the third level, the two risk management units of the Group (Group Risk Control & Architecture Division and the Group Market and Operational Risk Management Division) identify, monitor, control and quantify any kind of risks at portfolio and/or subsidiary level.