The main risks identified involve potential misstatements due to data elaboration or consolidation from primary sources. The risks identified are:

• Potential misstatements due to incorrect manual data entry, in relation to data referred to Energy, Waste, F-gas, Emissions, and Social areas;
• Potential misstatements due to incomplete data (in relation to the same areas of reporting as above);
• Potential misstatements due to incoherent or wrongly measured data (Energy, Waste, F-gas and Social);
• Potential misstatements due to incorrect data extraction from IT systems (in relation to the same areas of reporting as above);
• Potential misstatements due to errors in calculations, in particular for GHG data and social data;
• Potential misstatements due to wrong selection of conversion factors for calculations (Energy and GHG emissions).

As mitigation strategies, envisaged controls (also at entity level) can be either preventive or detective, depending on whether they are aimed at finding potential misstatements (detective) or rather avoid them (preventive). In relation to these mitigation strategies, a monitoring plan was introduced at the end of 2024 to prospectively test the adequacy of the design and the effectiveness of the controls in place to mitigate and reduce the identified risks.