IBERSOL | Integrated Management Report | 2025

INTEGRATED MANAGEMENT REPORT 2025 Financial Units – that reporting to the Executive Committee, promote, coordinate and facilitate the development of risk management processes. The Supervisory Board monitors the effectiveness of the risk management system, the internal control system, and, where applicable, the internal audit system. It reviews the information received from the Board of Directors, particularly in respect of the risk management policy, and receives reports prepared by the internal control departments concerning the risk management and compliance functions, at least where such reports relate to financial reporting, the identification or resolution of conflicts of interest, or the detection of potential irregularities. The Supervisory Board follows the risk management and internal control systems with a view to ensuring that the risks incurred by the Company are consistent with the objectives defined by the Board of Directors. Where it deems appropriate, the Supervisory Board — which shall have access at all times, in accordance with the applicable legal limits, to all information necessary for the performance of its duties — may issue an opinion on the work plans and resources allocated to the internal control functions, including risk management, and propose any adjustments to the operational management it considers necessary. In summary, the risk management framework is ensured by: • Functional/Business Areas : The functional areas of the central structure and business are involved in risk management within their respective scopes and at all stages of the process. They assume as their core and exclusive responsibilities the identification and treatment of risks. • Central Administration/Management : The central administration/management supports the functional areas in analysing and assessing risks, as well as in the periodic monitoring of key indicators and the effectiveness of mitigation measures. It also ensures the regular review of the risk management process. • Supervisory Board : The Supervisory Board periodically monitors the overall risk management process, ensuring its compliance with the Company’s risk management policy and with best practices. Accordingly, the risk management system implemented within the Company is deemed appropriate to its size and to the complexity of the risks inherent in its activities as described, ensuring that risks are effectively identified, assessed, and addressed, thereby contributing to the Group’s sustainability and growth. 283