In addition, the Group has developed an IT risk management methodology founded on “risk-based” and “cyber security by design” approaches, making business risk analysis the fundamental step in all strategic decisions.