The Risk Management Department belongs to the second line of defense of the Internal Audit System. The identification and management of individual risks remains under the responsibility of the Business Areas within which these risks fall, in accordance with the Corporate Risk Classification.