This describes the concept that business units identify and gather risks and pass them through functions to the company management team which consider this against the principal risks and company strategy and leads to risks being flowed down into the business units. The top box has 'company management team' inside, with the text above: Risk data is considered against the company Principal risks and informs strategy, which is flowed down. An arrow then points below with the number 3 alongside it, to four boxes, from left to right, they are labelled: Business unit 1, Business unit 2, Business unit 3, Business unit 4, Business unit 5, Above the boxes is the following text: Businesses and functions identify their risks, the risk team monitor and gather key risk data via the corporate risk tool. There is an arrow with the number 1 next to it that then points left towards a group of 6 boxes, from top to bottom they are labelled corporate functions, finance, HR, IT, E&T and risk team. To the right of these boxes there is the following text: Risk data is compiled and flowed up to the company management team. There is an arrow that then points to the box at the beginning, with the number 2 next to it.