ADP // 2021 Universal Registration Document

R I SK AND MANAGEMENT 2 RISK FACTORS

2 – C: Events of a geopolitical nature are likely to affect the activities of the Groupe ADP. The Groupe ADP, a leading player in the airport industry, is currently active (all activities and subsidiaries combined) at some 125 airports worldwide in 50 countries. To achieve this, the group relies on a unique network of 28 airports, operated under management contracts or concessions, and on a pool of skills and expertise serving international markets. Hence, political, economic or social instability in or near the countries where the Group operates could adversely affect its business. The occurrence of a serious crisis or conflict, whether political or military, could have an unfavorable impact on: ◆ air traffic at airports that are forced to close occasionally due to local/regional unrest; ◆ the security of people and goods; ◆ the conduct of business; ◆ the profitability or even the maintenance of activity of certain hubs. Among the measures implemented by the Group to deal with this largely exogenous risk, the following should be noted: ◆ systems for reporting alerts, ensuring business continuity and protecting international employees; ◆ the Group’s investment decision-making process, which for the Group is based on the Strategic Investment Committee (SIC) and the Group Investment Committee (COE). It is important to note that the Group’s activities are spread mainly over four geographical areas (in Europe, Asia, Africa and South America), which favors a geographical balance of activities with regard to regional political risks.

In light of these issues, Groupe ADP has engaged since several years numerous actions aiming strengthening the security of its information systems while relying on a dedicated policy and governance. However, the implementation of this plan has become increasingly difficult given the company’s economic context due to the impact of the health crisis, it has been possible to carry out fundamental actions such as the ramping up of the Security Operation Center (SOC) in collaboration with Hub-One or the deployment of the IS Cyber Security Policy in the group’s airports. The group’s cybersecurity activity remains mainly focused on surveillance and rapid reaction to acts of cyber-maliciousness. 2 – B: In a turbulent global geopolitical context, marked by an ever-changing terrorist threat, Groupe ADP may be exposed to malicious acts on its facilities or on the assets it operates. The facilities or assets operated by Groupe ADP could be targets of external attacks or malicious acts of any kind. The possible consequences of their occurrence could result in damages to persons and property and interruptions in the operation of facilities, thereby putting the continuity of the group’s business activities at risk. Such acts may damage the group’s reputation and adversely affect not only the traffic on the airports it manages but also its commercial activities, and in general, its financial position and prospects. Likewise, terrorist attacks in countries where the group operates could negatively affect their attractiveness and have repercussions on their air traffic levels, thereby altering the group’s financial position. Faced with these risks, Groupe ADP has undertaken, in France in particular, in addition to its sovereign delegated airport security missions, actions aiming at protecting its infrastructures, particularly landside, in collaboration with the relevant services of the State. Audits and inspections are regularly carried out by the various authorities to verify the security system and its compliance with applicable standards. Landside crisis exercises have been organized to address the threat. The international platforms have also set up security systems according to their field of responsibility. Nevertheless, the group operates in countries where the geopolitical risk remains high. Consequently, this risk is largely exogenous and requires constant reinforcement of control systems.

2.1 .4 RISKS RELATED TO THE MAINTENANCE AND ROBUSTNESS OF AIRPORT CAPACITIES

3 – A: Groupe ADP faces challenges in the robustness of its key networks (electricity, energy, water, IT and telecommunications). The sudden decrease and gradual recovery of air traffic, induced by the Covid-19 pandemic has led the Groupe ADP to adapt its resources to its level of activity, in particular by putting many infrastructures on standby. In spite of a reduced activity, Groupe ADP is facing challenges in terms of the robustness of its key networks (electricity, energy, water, IT and telecommunications) to: ◆ guarantee the regulatory compliance of infrastructures and equipment;

◆ maintain its infrastructures in operational condition; ◆ preserve the continuity of its services. A significant failure of the group’s key networks could indeed disturb or even interrupt the operational activity of its platforms. The existence of back-up equipment, preventive maintenance and the pursuit of dedicated investments contribute particularly to the strengthening of the robustness of the networks. 3 – B: Groupe ADP must face the challenge of maintaining its assets. Groupe ADP is bound to provide its customers with facilities in good working order.

130

AÉROPORTS DE PAR I S / UN I VERSAL REG I STRAT I ON DOCUMENT 202 1