Among other things, it uses all prescribed procedures to check compliance with the Group Cybersecurity and Information Security Framework, carries out special security checks (penetration tests and vulnerability assessments) and continuously assesses the level of security, taking further measures - as appropriate to address new threats and risks.