The General Risk Control and Management Policy and its basic principles are embodied through a Comprehensive Risk Control and Management System, supported by a Group Risk Committee and backed by an appropriate definition and assignment of functions and responsibilities at the operating level and by procedures, methodologies and support tools suitable for the different stages and activities of the system, including: a.