The system covers three types of activity: > “line control” (or “first level control”), consisting of the set of control activities the single operating units or Group companies perform on their own processes in order to guarantee the correct undertaking of operations; > “second level” controls, which are entrusted to specific corporate departments and which aim to manage and monitor typical categories of risks, including, by way of example, operational risks, market risks (such as commod ity risks and financial risks), credit and strategic risks, and (non) conformity risk; > internal audit (“third level” controls) aims at verifying the structure and function of the system overall, also through monitoring the controls, as well as the second level con trol work.