From 2015, Webuild has launched a project for the development and implementation of a Risk Management model, to address and manage risks in accordance with the industry’s best practices, and will be gradually extended to all operating companies of the Group.

The model is evolving in terms of approach, methodology and instruments, as well as to its extension to all Group operational units. In line with the project, a Risk Management structure with "second level" control relevant functions has been set up, independent from the other Business and Corporate functions.

The Risk Management structure, in particular, deals with the following activities:

1. Identification and monitoring, in consultation with the Management (Risk Owners) and in support of the Director in charge of the Internal Control and Risk Management System, of the risk factors of significance for the Group, ensuring the implementation of risk mapping and assessment and monitoring of mitigation actions taken by Risk Owners
2. Support in strategic and commercial planning, proposing the corresponding guidelines as well as the company's risk inclination to the competent bodies
3. Support in operations, with to the aim of achieving the strategic goals defined in the Business Plan
4. Assurance as to the adequacy and consistency of the Risk Management framework adopted through the development and the appropriate updating of the risk model and methodologies and tools for effective risk management
5. Support in the creation and dissemination of a risk culture throughout the Group.

The Group aimed to equip itself with a system capable of periodically detecting and managing the main risks to which it could be exposed, through a detailed analysis (for each Country, counterpart and project), both with regard to portfolio, to assess the risk profile in relation to the risk limits that have been defined at an overall level. The activity focuses on the identification and risk categorization with a potential impact on business and on the development of methods and tools aimed at managing the dimensions of the identified risk; with particular emphasis on risks connected with the counterparts and the country context within which the Issuer develops its own business have been also developed.