Activities in Group and individual operations; self-assessments to verify the effectiveness of critical controls; annual risk management reports submitted by managers to the Audit and Risk Committee; and risk analysis of every issue submitted to the Board for approval.