a) Defining the risk strategy and appetite determined by the Board of Directors. b) Segregate functions, at the operating level, between risk-taking areas and areas responsible for the analysis, control and monitoring thereof.