The CRMS Policy establishes: �� the different risk categories (operational, strategic, financial, compliance and reporting), �� the basic principles and guidelines for action to be observed in the control and management of risks, �� the bodies responsible for ensuring the proper functioning of the internal risk control and management systems, together with their roles and responsibilities and, �� the level of risk considered as acceptable.