ADP // 2021 Universal Registration Document

R I SK AND MANAGEMENT

RISK MANAGEMENT AND INTERNAL CONTROL SYSTEM

2 . 2 R I SK MANAGEMENT AND I NTERNAL CONTROL SYSTEM

2.2.1 GENERAL PRESENTATION

2

General presentation A global approach

◆ the Audit and Risk Committee, an extension of the Board of Directors, whose mandate is specified in the rules of procedure of the Board of Directors; ◆ the Executive Committee (Comex), chaired by the Chairman and CEO, which takes part in directing Groupe ADP, both operationally and strategically, and debates any subject relating to its smooth running; ◆ the Risk and Internal Control Operational Committee (CORCI) which brings together the directors of the entities 1 ; ◆ the group’s business lines; ◆ the network of “Audit-Risk Management-Internal Control” (ARC) coordinators appointed in each Group entity 1 . It is based on the model of “three lines of activity control”, invented by the IFACI (the French Institute for Audit and Internal Control) and the AMRAE (the French Association for the Management of Corporate Risks and Insurance).

The risk management and internal control systems to which the management systems contribute, as well as the internal audit system constitute a global approach to control the group’s activities and objectives. Governance and scope The approach is coordinated the Audit, Internal Control and Risk Management Department, which reports to the Audit, Security and Risk Management Department. It is in charge of the audit and internal control within the group. It is supported by: ◆ the Board of Directors, which determines the directions taken by Aéroports de Paris SA’s activity and ensures they are followed (Article 16 of the Articles of Association);

BOARD OF DIRECTORS AUDIT AND RISK COMMITTEE

EXECUTIVE COMMITTEE (COMEX) RISK AND INTERNAL CONTROL OPERATIONAL COMMITTEE (CORCI)

1 st LINE OF CONTROL

2 nd LINE OF CONTROL

3 rd LINE OF CONTROL

HR

INTERNAL AUDIT

LOCAL MANAGEMENT

Purchases

Legal

Actors involved in the business activity

EXTERNAL AUDITS REGULATION

Finance

RISK MANAGEMENT AND INTERNAL CONTROL RISK HEDGING BY INSURANCE

Management

ETHICS AND COMPLIANCE

IS …

Network of ARCcoordinators andmanagement systems

The scope of this group system covers the Aéroports de Paris company and its controlled entities.

1 In 2021, the entities correspond to the divisions of Aéroports de Paris and its (wholly or jointly) controlled subsidiaries.

133

AÉROPORTS DE PAR I S / UN I VERSAL REG I STRAT I ON DOCUMENT 202 1