We have made progress in several areas: a mandatory training programme on "risk and reputation" has been implemented across the whole Group; in will have a risk management objective; and we have created the role of Information Systems Security Manager (RSSI) at Group level, so as to better guide and develop the actions of the managers of this function (the RSSIs) at the level of the operational units.