Compliance risks assessment is periodic and documented with the Fortum Management Team having oversight of the process; a systematic risk assessment is included in business plans, and follow-up is part of the company's business performance review.