A cross-functional risk management framework covering multiple risk areas, including compliance, the environment, quality, information security, and security-related trade controls, with specialist committees, councils, designated officers, and review meetings established to prevent incidents and report to the Board of Directors and other bodies.