A challenge arising from the process also stems from the multiple regulations with risk reporting or quanti�cation requirements that are based on distinct methodologies (e.g.: ORNISS, GDPR, Corruption, OSH, security risk, etc.) and sometimes signi�cantly different from those that have been undertaken at the corporate level.