These guidelines describe the principles and policies, as well as the reporting structure and risk management process.