Our risk governance structure is guided by the “Three Lines Model”. As the first line functions, risk owners of all corporate departments and business units regularly conduct risk and control assessments to evaluate the implications of identified risks and the adequacy and effectiveness of controls in place to mitigate these risks.