conforms to the ISO standard on the principles and guidelines in risk management and is ongoing and comprehensive in nature, consolidating said management per business unit, subsidiary and support areas at a corporate level.