Changes to the risk register are proposed to, and agreed by, the Company’s Executive Committee, in addition to the Board of Directors and Audit Committee, with risks reviewed at each stage where appropriate.