Risk profile

The risk appetite is determined in terms of risk capacity that the company can assume without significantly affecting the results of the operation, therefore, the risk tolerance and appetite levels are set by the Board of Directors and the Risk committee, who, within their evaluation, established and defined that their acceptable residual risk level should be in the low and medium category, which are administered and managed with improvement plans and internal controls without affecting the assets and reputation of the company; Those risks that exceed this risk appetite must be reviewed and evaluated by the Board of Directors for decision making in their treatment.