IBERSOL | Integrated Management Report | 2025

CORPORATE GOVERNANCE REPORT digitalisation of sales channels. Accordingly, the Group is committed to acting proactively and diligently at all times in favour of the security of business information, in terms of its availability, integrity and confidenti- ality, through the implementation of technologies, processes and protection, detection and disaster recovery systems, in full coordination with crisis management and business continuity management systems. 54. Description of the identification, assessment, monitoring, control and risk management process. The internal risk management process in the Ibersol Group is based on guidelines common to the main risk man- agement frameworks, considering a cyclical approach consisting of five main stages: The phases of risk identification and treatment are typically more decentralised and associated to the different functional and business areas, while the analysis, assessment and monitoring and revision phases are generally articulated by the latter in interaction with the Board. This operating model makes it possible to maintain a high level of awareness, accountability, and control in the approach to the different types of risks that affect the organisation. As a structured approach, Risk Management is integrated throughout the Group’s planning process. Its purpose is to identify, evaluate and manage the Functional/business areas Bord/central management 290