In converting our policy-based compliance to process-oriented compliance, and in doing so we conducted a comprehensive risk analysis of our core processes along the value chain at Group level to identify inherent legal risks in these processes.