It determines the adequate level of risk for each subsidiary, approves adequate investment amounts and loss tolerance limits, and enacts and revises risk management regulations and the group's risk association regulations.