A consolidated risk report, which includes action plans prepared by the Group executive directly responsible for addressing the risk, is reviewed annually by the Audit Committee and the Board of Directors.