The risk controlling functions report their findings to the management and the Risk and Compliance Officers report in addition to this independently to the Group function and through that function to both the CEO and the Board of Directors.