Aéroports de Paris - 2019 Universal registration document

REAL ESTATE ASSETS AND FACILITIES

RISK AND MANAGEMENT

PERSONS RESPONSIBLE FOR THE UNIVERSAL REGISTRATION DOCUMENT AND ANNUAL FINANCIAL REPORT

STATUTORY AUDITORS

INFORMATION ON THE COMPANY

BUSINESS OVERVIEW

ORGANISATION CHART

REVIEW OF THE FINANCIAL POSITION AND INCOME

EQUITY AND CASH FLOWS

INFORMATION CONCERNING TRENDS

Certified by IFACI since 2008, the Corporate Audit and Internal Control Division assesses the operation of the risk management and internal control systems. Through its recommendations, it helps improve safety and optimise the overall performance of the Group’s entities 1 . The annual audit programme is presented to the Comex and examined by the Audit and Risk Committee. It informs the same bodies of the monitoring: ◆ of internal audit action plans; ◆ of the conclusions drawn from the audits carried out within Aéroports de Paris SA by external auditing and monitoring bodies (with the exception of management system audits). External control structures In the first instance, this relates to the Statutory Auditors appointed by the General Meeting of Shareholders of 18 May 2015: Ernst & Young Audit and Deloitte & Associés. Moreover, Aéroports de Paris is subject to specific controls due to it being a majority State-owned company. The Court of Auditors, the Economic Affairs Committee of the National Assembly and the Senate, the State Economic and Financial Verification Mission and the Council on the Environment and Sustainable Development, in particular, are therefore responsible for overseeing the finance, management and internal control sectors (see section 15 of the 2019 Universal Registration Document). The Company is also subject to controls of an operational nature, which are carried out by the French Civil Aviation Authority and by the European Commission. Moreover, to obtain or maintain certification of their management systems, the various Group entities that are affected undergo annual external assessment audits, conducted by independent accredited organisations. These audits may lead to requests for improvement. Aéroports de Paris is also subject to assessments by credit and extra- financial rating agencies. Limitations The risk management and internal control system can only provide reasonable and not absolute assurance regarding the overall control of the Group’s risks and objectives. Indeed, these systems have inherent limits, particularly regarding uncertainties affecting the environment and possible failings due to mistakes or human error. Risk management and internal control systems relating to the development and handling of financial and accounting reports The risk management and internal control systems relating to the development and handling of financial and accounting reports concern the financial, management control and accounting areas. Accordingly, this principally concerns the Finance, Management & Strategy Division and the Accounts Division, which report to the Finance, Strategy & Administration Division. Divisional responsibilities The Finance, Management & Strategy Division is responsible for the Group’s strategic and financial direction. It guarantees that the Economic Regulation Agreement (ERA) is fulfilled and is consistent with the strategic

plan, directs the main levers for economic regulation, supplies financial expertise and forecasts, manages cash flow and debt and is in charge of financial communication. It supplies senior management and various divisions and subsidiaries with financial reports and analysis allowing them to monitor their performance. It contributes to defining and tracking financial objectives and to determining any necessary corrective actions. The Finance, Management & Strategy Division is responsible for a branch of management control (finance, management and strategy branches). The Corporate Accounts Division makes accounting and financial reports available to different decision-making bodies within the Company, allowing them to monitor their performance. It is responsible for the production of financial statements and consolidated financial statements in accordance with French and international accounting legislation as well as the establishment of reliable accounting procedures. It includes the financial division, whose responsibilities include ensuring that the fiscal policy is correctly applied at group level. It manages fiscal integration and local taxes, as well as all other taxes. Processes and methods Group guidance STRATEGIC STEERING The strategic steering process is based on emphasising the strategy as a framework tool and guide for the financial year as well as on the alignment between the Group’s short- and medium-term budget and reporting objectives. The Finance, Management & Strategy Division manages the strategic analysis process and the strategic objective operational planning process and has ensured its monitoring. The Finance, Management & Strategy Division is responsible for aligning the financial objectives of the subsidiaries and consolidated shareholdings with those of the Group. It also oversees and controls financially the subsidiaries and consolidated shareholdings. With its overall view of this activity, it adjudicates on the alignment of projects with the Group’s strategic goals and carries out arbitration. Concerning non-airport contracts, the Finance, Management and Strategy Division uses the prior analysis from the Real Estate Division and Customer Division, for real estate activities and commercial joint ventures, respectively. This organisation is accompanied by a reporting system as part of the guidance of both the Group and the Company. The Group’s steering mechanism is currently being updated in order to adapt it to its new, wider scope, since takeover of TAV Airports and Airport International Group (“AIG”) by Aéroports de Paris, and to take ADP International’s role into account. STRATEGY AND INVESTMENT APPROVAL PROCESS The Group’s steering mechanisms are based on institutional and managerial committee arrangements within the parent company. As extensions of the Board of Directors of Aéroports de Paris, the Strategy and Investment Committee and Audit and Risk Committee make recommendations to it on, respectively: ◆ the definition and implementation of the strategic policies of Groupe ADP, including its diversification or growth operations; ◆ the efficiency of the risk management, internal control and internal audit as well as on the appropriateness of the Group’s financial policy. Their mandates are specified in the rules of procedure of Aéroports de Paris’ Board of Directors (see section 14.1 of the 2019 Universal Registration Document).

03

1 In 2019, the entities correspond to the divisions of Aéroports de Paris and its controlled subsidiaries.

19

AÉROPORTS DE PARIS ® UNIVERSAL REGISTRATION DOCUMENT 2019