On approval of the Rules for the application of the risk management system according to criteria that are not confidential information