Our risk management is based on the best national and international practices, such as ISO 31000 and COSO ERM, and those of the Brazilian Institute of Corporate Governance (IBGC) and the Institute of Internal Auditors of Brazil (IIA). Additionally, the risk management process undergoes periodic auditing, conducted by internal auditing in conjunction with specialized external consultancy. Internally, our operations are guided by the Risk Management Policy, which establishes guidelines and responsibilities for each employee, in addition to describing the methodology applied to the processes of identification, evaluation, processing, monitoring and communication of situations. Based on these guidelines, we establish steps to ensure ongoing risk monitoring and control. The Company’s major risks, with high and very high criticality, are reported to the Risk Committee (executive reports), the Audit Committee and the Board of Directors (independent reports).