a clear Information Security Strategy that clarifies the related governance structure adopted by the Group and guidelines for cyber risk management in the field of IT architectures and company processes.