The internal control and risk management system consists of the set of rules, procedures and organisational structures for identifying, measuring, managing and monitoring the main business risks, contributing to the conduct of the company aimed at safeguarding the company’s assets, the efficiency and effectiveness of business processes, the reliability of financial information, compliance with laws and regulations as well as the Company Bylaws and internal procedures.

On 3 December 2019, the Shareholders' Meeting has decided to confer on EY Spa for the revision of the separate and consolidated financial statements for 2019 - 2027.

The function of Internal Audit has been entrusted to an external subject, endowed with adequate requirements of professionality, independence and organization in the person of Daniele Bergamini

The function of Internal Audit is called to verify in compliance with international standards, the operation and suitability of the internal control and risk management system, through an Audit Plan approved by the Board of Directors, based on a structured process of analysis and prioritisation of the main risks.

The Company has adopted a Model of Organization, Management and Control, prepared pursuant to and for the effects referred to in Legislative Decree 231/2001 which:

provides information on the content of the legislative decree, which has introduced into our legal system a liability of companies and entities, for crimes committed, in their interest or advantage, by its representatives or its employees;

outlines the organisation, management and control model of the company, aimed at informing on the content of the law, addressing business activities in line with the model and overseeing the operation and compliance of the model.