an Information Security Risk Management (ISRM) Manual that, in line with the Group ERM Policy, defines the methodology and the responsibilities for the identification, assessment and treatment of risks that could compromise the achievement of security objectives and therefore the confidentiality, integrity and availability of Group information.