Risk Management Process
This page has a spanish version
EDPR follows the risk management process of EDP Group, which is structured around five main phases (identification, analysis, evaluation, treatment, and monitoring), complemented by a prior phase of establishing the context, and by adequate levels of communication between the various stakeholders:
i. Establishing the context
- Assessment of the external and internal environment
- Defining the fundamentals for risk management
ii. Identification
- Comprehensive mapping of key risks (and representation in structured taxonomy)
iii. Analysis
- Establishment of risk criteria
- Risk Materiality Analysis (qualitative and quantitative)
iv. Assessment
- Exposure Assessment in light of risk appetite
- Definition of treatment strategies to implement
v. Treatment
- Implementation and execution of the established treatment plan
vi. Monitoring
- Monitoring and reporting the evolution of risk indicators, materialization of events and progress of treatment measures
vii. Communication
- Continuous and bidirectional communication between relevant stakeholders
Fundamental
phases
Preliminary/continuous
phases
1778061179