IBERSOL • 2023 Integrated Management Report

INTEGRATED MANAGEMENT REPORT 2023 The risk identification and treatment phases are typically less central- ised and associated with the different functional and business areas, while the analysis, assessment and monitoring, and review phases are generally carried out by the specialised areas in consultation with the Board of Directors and the respective committees delegated for this purpose. This operating model makes it possible to maintain a high level of awareness, accountability and control in dealing with the dif- ferent types of risks affecting the organisation. The following diagram represents the main groups of risks considered relevant in terms of probability of occurrence and level of potential impact. Risk management process and structure of Ibersol Group Risk Groups Mapping 2023/2024 Functional/business areas Board/central management 57