The system adopted deals with the following aspects: updating of the mapping of risks, identifi cation and assessment of the risks and controls adopted to contain them and defi ne suitable monitoring and management strat egies.