Product and Process Governance covers analysis concerning the risks of legal and regulatory sanctions, operational risks, risks of financial loss or reputational risks arising from legal, regulatory or other infringements or omissions, the code of conduct and best practices in force, ensuring that the analysis of the risks has been carried out in advance and rigorously, and that the appropriate instruments are in place to measure, limit and control the risks to be incurred.

In the event of a change to the product or service, it must be assessed whether this change has an impact on any of the points mentioned and, if so, the respective analysis must be carried out.