The risk management framework including the corresponding responsibilities and processes is governed through a Group-wide binding policy, applicable to all of its direct and indirect controlled subsidiaries.