BPCE - 2018 Risk report / Pillar III

11 NON-COMPLIANCE, SECURITY AND OPERATIONAL RISKS Business continuity

Business continuity 11.3

The managementof businessinterruptionrisk is handledfrom a cross-businessperspective.This includesthe analysisof the Group’smain critical business lines, notably liquidity, payment instruments,securities,individualand corporate loansand fiduciaryactivities.

Organization As of September 1, 2017, the Group Head of Business Continuity, responsiblefor the Group Business Continuitydivision, reports to the Security division, which in turn reports to the Compliance, Security and Operational Risk division. The Group Business Continuity division performs its tasks independently of operational divisions. Theseinclude: managing Group business continuity and coordinating the Group ● Business Continuity division; Activities in 2018 Cybercrime risk was the main focus of the year: development of a cybercrime plan, complete with exercises organized internally or by third parties (Digital Economy Directorate of French Polynesia, Banque de France Robustness Group). Improved understanding of the business continuity plans of the Group’s main providers was the second major focus, which will be continued in 2019: overhaul of the approach, rolled out via a Group tool currently under development.

coordinating Group crisis management; ● managing the implementation of the Group Contingency and ● Business Continuity Plans (CBCPs) and keeping them operational; ensuring compliancewith regulatory provisions governing business ● continuity; participating inGroupe BPCE’sinternal and external bodies. ●

Continued efforts to strengthen the overall business continuity system: a new Groupwide business continuity policy is being developed, coverage of cross-business incidents has been improved and a crisis managementdecision-makingtool has been deployed. The mainbusiness linesare also subject to regular review. Furthermore, the Group also took part in the resolution of major crises, from the flooding of the Seine riverbank to the many crises associatedwith global warming.Health-relatedcrises are also closely monitored.

204

Risk Report Pillar III 2018