Risks are identified, analysed and prioritised using common methodologies, and risk controls are designed and implemented having regard to the overall corporate strategy, with risk controls administered via Group-wide processes.