← Identify and mitigate risks arising from non-compliance with laws and regulations

The risk mapping must cover only financial and operational risks.