The company manages non-financial risks in four steps: the identification of potential risks caused by legal disputes or regulatory violations that arise during normal operations; assessment of the probability and consequences of risk events; provision of mitigation strategies and plans; and monitoring of follow up processes.