Moreover, the Group has conducted a risk assessment of the corporate applications that process personal data, to evaluate the security measures implemented, and it has developed a procedure for the execution of privacy impact assessments (PIA) that determines the level of risk entailed whenever data are processed with a view to establishing the most appropriate control measures to limit this risk.