Risk management guidelines have been drawn up separately for the following areas, among others: ICT and information security, finance operations, environmental issues, misconduct, security and insurance.