the implementation of the rules, metrics and procedures that are consistent and coherent with the governance model, in line with best practices, and with specific regard to risk-mapping, defining mitigation actions and monitoring of related plans.