Ex-ante: the levels of risk tolerance are reviewed and approved on an annual basis through risk policies and limits that establish the qualitative and quantitative risk appetite at the group level and at each of the main businesses and corporate functions.