Any risks to business operations are assessed at all levels throughout the Group, taking into account procedural documents and the responsibilities of everyone involved in the risk management process.