The ERM (*) process is based on four main phases:
- analysis: this phase also includes the identification of risks
- evaluation: this phase involves the evaluation of the risks, the identification of the risk owner and the approval of the action plan by the Risk Management Committee
- processing and verification: this phase envisages the establishment of interdepartmental work groups to monitor the action plans approved by the Risk Management Committee
- reporting: this phase provides a flow of information on the structure of the risk profile and its development according to a flexible schedule, defined on the basis of the needs of the stakeholders.
The process is updated on an annual basis (or more regularly) at the discretion of the Risk Management Committee. Updating and support is the responsibility of the Risk Management department.
(*) The mapping of the processes/departments is updated every quarter by the Human Resources and Organisation department and forwarded to the Risk Management department.