As general criteria for risk management, the Group's overall risk level, determined as a result of the statistical aggregation of individual risks, must not exceed this level of globally acceptable risk.