63 / 64
63
Marketing and sale of advertising slots
Marketing of other services
Information and technology systems
Technical infrastructure management
Operating management of assets and general infrastructures
Human resources and prevention of occupational risks
Judicial, legal and regulation
Administration and finance
4.
Risks
The System includes all the risks of the Atresmedia Group, classified by different categories and assigned to
different regulations, organisations and processes. A complete map of risks has been defined, which enables all
risks to be identified, both from the surroundings, and those relating to the activity and business performed and
others specific to the Company.
These risks are assessed periodically with regard to their impact and probability.
Each of the risks identified has established controls and procedures that prevent their appearance. In the event
any risk materialises, it is mitigated via defined control mechanisms and risk responses established in each case.
5.
Control and control tools
The System includes a full identification and description of all the controls. All the controls are associated to all
those risks in order to be mitigated; accordingly, the satisfactory application thereof enables the potential impact
of risks materialising to be reduced.
The Atresmedia Risk Management and Control System has different tools that boost internal control and reduce
the potential impact of existing risks:
a.
Policies, Procedures and Protocols, adequately notified through the corporate communication channels
to the affected areas and people.
b.
Other IT control tools (additional to the GRC system itself), including most notably:
Purchasing management system
Management and authorisation system for contracting proposals
Management and authorisation system for programme estimates
Quality system
Computer application to comply with internal regulations in securities market matters.
c.
Queries and Whistleblower Channel:
Enables all employees to notify, in an easy and confidential manner, those procedures that constitute
inappropriate conduct or behaviour under the Code of Conduct or any other applicable legislation, and
especially those that do not comply with the Internal Control over Financial Reporting (ICFR) System.
d.
Control procedures related with the Internal Control over Financial Reporting (ICFR) System:
Atresmedia, in its undertaking to provide reliable, integral, true and uniform information to investments
and to the market, has implemented an Internal Control over Financial Reporting (ICFR) System which
guarantees the accuracy of the financial information issued.
e.
Regulatory Compliance Committee
Body charged with the management, surveillance, coordination and integration of corporate policies and
actions aimed at complying with all applicable legislation and regulations (both external and internal
protocols and procedures), as well as supervision of compliance with the Code of Conduct.
f.
Internal conduct regulation in securities market matters.
g.
Criminal Compliance Head
A specific figure exists charged with providing the necessary advisory services to executives and directors of
Atresmedia in decision making that may have potential criminal consequences.