establishes monitoring systems for the technological/operating/legal risks arising in contract execution (Program Risk Management) and, more generally, for the activities managed independently by the operating companies, issuing directives and guidelines which are implemented by these companies through specific procedures and which are responsible for their actual application.