AIRBUS - 2020 Universal Registration Document

4. Corporate Governance / 4.1 Management and Control

4.1.3.4 Board Declaration Based on the Company’s current state of affairs, the reports made directly available to the Board of Directors, coming from different processes, audits and controls and the information it received from management, the Board of Directors believes to the best of its knowledge that: – – the internal risk management and control systems provide reasonable assurance that the financial reporting does not contain any material inaccuracies; – – this report provides sufficient insight into any material failings in the effectiveness of the internal risk management and control systems; – – it is justified that the Financial Statements have been prepared on a going concern basis; and In accordance with Principle 1.3 of the Dutch Code, Airbus Corporate Audit & Forensic assesses and provides objective assurance on the design and effectiveness of the Company’s risk management, internal controls and governance systems. Its mandate is set out in the Airbus Corporate Audit and Forensic Charter. Corporate Audit & Forensic engages in the independent and objective corporate assurance activities of internal auditing and forensic investigations. It supports the Company in improving its operations and accomplishing its objectives by bringing a systematic and disciplined approach to evaluate and improve the effectiveness of the organisation’s governance, risk management and internal controls. The function includes a team of forensic specialists who assist Airbus and the Legal and Compliance function by leading and supporting investigations of compliance allegations. 4.1.4 Internal Audit

– – this report states the material risks and uncertainties that are relevant to the expectation of the Company’s continuity for the period of 12 months after the preparation of the report. It should be noted that no matter how well designed, the internal risk management and control system has inherent limitations, such as vulnerability to circumvention or overrides of the controls in place. Consequently, no assurance can be given that the Company’s internal risk management and system and procedures are or will be, despite all care and effort, entirely effective.

4

The department’s independence is established by direct reporting to the Audit Committee and by access to the CEO. Corporate Audit & Forensic adheres to the Institute of Internal Auditor’s Definition of Internal Auditing, Code of Ethics and International Standards for the Professional Practice of Internal Auditing as well as relevant policies and procedures of the Company. The department was recertified by the Institut français de l’audit et du contrôle internes (IFACI) in 2018.

167

Airbus / Registration Document 2020