IBERSOL | Integrated Management Report - 2024

CORPORATE GOVERNANCE REPORT In summary, the risk management framework is ensured by: - Functional/Business Areas: The functional areas of the central structure and business are involved in risk management within their respective scopes and at all stages of the process. They assume as their core and exclusive responsibilities the identification and treatment of risks. - Central Administration/Management: The central administration/ management supports the functional areas in analysing and assessing risks, as well as in the periodic monitoring of key indicators and the effectiveness of mitigation measures. It also ensures the regular review of the risk management process. - Supervisory Board: The Supervisory Board periodically monitors the overall risk management process, ensuring its compliance with the Company’s risk management policy and with best practices. Accordingly, the risk management system implemented within the Company is deemed appropriate to its size and to the complexity of the risks inherent in its activities as described, ensuring that risks are effectively identified, assessed, and addressed, thereby contributing to the Group’s sustainability and growth. 53. Identification and description of the main types of risks (economic, financial and legal) to which the company is exposed in carrying on its business. The Board of Directors believes that the Group is exposed to the normal risks arising from its activity in the restaurant business. Below are briefly presented the risks that are subject to regular analysis, assessment and monitoring by the functional and business areas in coordination with the Board of Directors. Quality and Food Safety Risks The Quality Management Department is responsible for ensuring the majority of prevention and control measures across various areas of the Ibersol Group’s business. Risks associated with quality and food safety are critical to the Group’s operations, as they are directly linked to the quality of its core product offering and the need to safeguard consumer health and safety. The monitoring and control of such risks rely primarily 280