ADP_REGISTRATION_DOCUMENT_2017

RISK MANAGEMENT AND CONTROL 04

RISK MANAGEMENT AND INTERNAL CONTROL SYSTEM

4.2

RISK MANAGEMENT AND INTERNAL CONTROL SYSTEM

Global system A Global approach

◆ the Executive Committee (Comex), chaired by the Chairman and CEO, which takes part in directing Groupe ADP, both operationally and strategically, and debates any subject relating to its smooth running; ◆ the Risk and Internal Control Operational Committee (CORCI) which brings together the directors of the entities; ◆ the network of “Audit-Risk management-Internal control” (ARC) coordinators appointed in each group entity 1 ; ◆ the “Management Systems” network. It is based on the model of three lines of activity control, invented by the IFACI (the French Institute for Audit and Internal Control) and the AMRAE (the French Association for the Management of Corporate Risks and Insurance). For 2017, the scope of the system covers the group, and in particular, its wholly-owned subsidiaries (ADP International and Hub One). It is planned to include TAV Airports within the system in 2018.

The risk management, internal control and internal audit systems constitute a global approach in support of the group’s management for its activities and objectives. The management systems, deployed within

certain group’s entities, are an integral part of risk control. Governance and scope of the systems

The approach is coordinated by the Risk Management and Compliance Department, reporting to the group’s Secretary General (for the risk management and internal control system) and by the Corporate Audit and Internal Control Division, reporting to the Chairman and CEO. It is supported by: ◆ the Board of Directors, which determines the directions taken by Aéroports de Paris SA’s activity and ensures they are followed (Article 16 of the Statutes & Articles of Association); ◆ the Audit and Risks Committee, which assists the Board of Directors in monitoring the effectiveness of the internal control and risk management systems (its mandate is specified in the rules of procedure of Aéroports de Paris’ Board of Directors);

BOARDOFDIRECTORS AUDITANDRISKCOMMITTEE

EXECUTIVECOMMITTEE (COMEX) RISKAND INTERNALCONTROLOPERATIONALCOMMITTEE(CORCI)

FIRST LINE OF CONTROL

SECOND LINE OF CONTROL

THIRD LINE OF CONTROL

HR

INTERNAL AUDIT

LOCAL MANAGEMENT

Purchases

Legal

Actors involved in the business activity

EXTERNAL AUDITS REGULATION

Finance

RISK HEDGING

BY INSURANCE

Management

RISK MANAGEMENT AND INTERNAL CONTROL

IS …

Network of ARCcoordinators

Network ofmanagement systems

1 In 2017, the entities correspond to the divisions of Aéroports de Paris, and specifically to its wholly-owned subsidiaries.

14

AÉROPORTS DE PARIS  REGISTRATION DOCUMENT 2017