Annually, each management will make a survey of its main risks and propose the actions to be implemented for their mitigation, which must be implemented by such management and their compliance must be accredited at the request of the internal auditors. The General Management will in turn determine which of these risks are the most relevant, with respect to which a more exhaustive follow-up should be carried out, documenting the evidence that will allow a posteriori evaluation of compliance with the committed actions. 24 The risk quantification, monitoring and communication process should consider both the entity's direct risks and those of its subsidiaries. The principles, guidelines and national and international recommendations developed by "The Committee of Sponsorship Organizations", COSO or other of similar characteristics should be used as a guide. The Board of Directors shall be informed of these matters at least once a year, in the last quarter of each year. In addition, the Board of Directors shall analyze annually with the risk management unit, in accordance with the provisions of Section 1.e) NCG No. 461, the following matters:
a. The adequate functioning of the risk management process.
b. The risk matrix used by the unit as well as the main sources of risks and methodologies for the detection of new risks and the probability and impact of the occurrence of the most relevant risks.
c. The recommendations and improvements that, in the unit's opinion, should be made to better manage the entity's risks. d. The contingency plans designed to react to the risks. The contingency plans designed to react to the materialization of critical events, including the continuity of the Board of Directors in crisis situations. Likewise, and in accordance with Section 1.f) NCG 461, the Board of Directors shall meet annually with the internal audit unit to analyze:
a. The annual audit program or plan.
b. Any serious deficiencies that may have been detected and those irregularities that by their nature should be reported to the competent auditing bodies or to the Public Prosecutor's Office.
c. Recommendations and improvements that, in the opinion of the unit, should be made to minimize the occurrence of irregularities or fraud. Regarding the crime prevention model implemented in the Company, and in accordance with the same section mentioned above, the Board of Directors will meet every six months with the person in charge of prevention, to review the implementation of the Crime Prevention Model, to see in detail the events occurred, the complaints received and the investigations carried out, as well as the preventive measures and plans implemented in the fulfillment of its mission; a practice that has been carried out since the implementation of the Model.