The risk management capability is built around three principles: stay pragmatic and focused on clearly identified priorities; remain as close as possible to Group operations; and maintain a decentralized approach to management, which mirrors the Group’s own operating process.