It includes the definition of all risks, or rather the types of risk that the Group is potentially exposed to, which are periodically reviewed on the basis of any changes in the mission, strategic objectives and scope of the group’s business, as well as the social and economic context;  the Group’s risk appetite, which defines the acceptable risk level in compliance with the risk management strategy.