rests with the process owners here, enabling us either to take preventive measures to counteract the risks arising from our operating activities or to identify existing risks at an early stage and adopt countermeasures. — NfR The second line of defence consists of Compliance Management and Risk Management, operating independently of each other.