Policy’, which constitutes a substantial instrument for the identification of the main risks which may affect the organization, establishing proper responses to such risks, as well as communication channels and formal disclosure mechanisms.