Any risks such as environmental or social risks that may fall outside the principal risks, or that may entail more than one principal risk, are also subject to the ERMF as well as oversight by the control functions (Risk and/or Compliance).