BPCE - 2019 Universal Registration Document

RESPONSIBLE INTERNAL AND EXTERNAL PRACTICES NON-FINANCIAL PERFORMANCE REPORT

design and implementation of an enhanced personal data – protection awareness campaign for project managers and the heads of products and services; in the fight against cybercrime: • implementation of new services adapted to changing – threats, available to all Group institutions; for example, an IOC (indicators of compromise) management platform and a proactive solution for analyzing web and mobile malware, increased presence of the Groupe BPCE CERT (Computer – Emergency Response Team) in the InterCERT-FR

community (run by the ANSSI) and in the European TF-CSIRT task force, creation of a unified Group Security Operations Center – (SOC) – a surveillance and detection control tower – including a Level 1 supervisor, operating 24/7, expansion in 2019 of the VIGIE community (Groupe BPCE’s – collective due diligence system) to include the Banques Populaires and the Caisses d’Epargne, in order to improve communications and oversight of their private information systems.

Reducing Groupe BPCE’s carbon footprint 2.4.2

Reducing the environmental footprint of the Group’s own operations is one of the key pillars of the 2018-2020 CSR strategy and the Group has set a goal of reducing its carbon emissions by 10% in relation to 2017. To this end, it has established a Group environmental reporting system and organized several campaigns to raise awareness of best practices. The Group’s training catalogue offers specific CSR training sessions open to all Group employees, covering: awareness of CSR, energy and climate issues: a session on • the CSR basics was provided to Group employees; CSR reporting: one session was held to raise employee • awareness of the organization of CSR data collection and the use of IT tools for preparing and publishing the CSR report;

training in the tools used to calculate the Group’s greenhouse • gas emissions; two training sessions were held for all employees using these tools in their work and for a panel of officers from the Logistics division; attendees were given a starter kit at the end of each session; drafting and publication of three practical guides, in 2019, • covering the categories that generate the most emissions, namely procurement, mobility and fixed assets; working groups focused on: • responsible procurement, particularly regarding emission – factors related to the CSR maturity of our suppliers, green IT, to identify best practices in the Group, – mobility, with a review of mobility plans, the promotion of – initiatives linked to the mobility plan in the carbon review (trips avoided, for example) and suggestions for mobility week.

GROUPE BPCE, A PARTNER AND PRECURSOR OF THE NET ZERO INITIATIVE, LAYS THE FOUNDATIONS OF A GROUPWIDE CARBON NEUTRALITY FRAMEWORK In 2018, the Group joined the Net Zero initiative alongside eight other French companies, to draft a methodology for companies seeking to achieve a challenging, credible and harmonized net zero carbon footprint. Carbon neutrality was explicitly mentioned in the Paris Agreement on climate change as an objective to be reached by the end of the century. It corresponds to a balance between greenhouse gas emissions and the volumes absorbed by carbon sinks. The first mission of the initiative was to draft a market-wide methodology for companies seeking to achieve zero net emissions.

CLIMATE CHANGE The Group’s target is to cut its greenhouse gas emissions by 10% in relation to 2017 by 2020, from 602,629 to 542,366 metric tons of CO 2 equivalent (tCO 2 eq) (1) . To monitor progress on initiatives subject to clear targets, the Group CSR & Sustainable Development division has used a special tool since 2013 to review its greenhouse gas (GHG) emissions. The tool is based on a methodology compatible with that used by the ADEME (the French environment and energy management agency), ISO 14064 and the Greenhouse Gas Protocol. After seven years spent collecting carbon data using a stable benchmark shared by all Group companies, the tool is able to provide: an estimate of each company’s greenhouse gas emissions; •

a map of GHG emissions: • by source: energy use, procurement of goods and services, – business travel, fixed assets and other, by scope: Indirect emissions caused by the Group’s – products and services are excluded from the scope of this analysis, but work is underway on this subject (see chapter 2.3.1, “Reflecting environmental, social and governance risks and our customers’ requirements and aspirations in our strategy”). The entities that currently perform carbon review represent 94% of the Group’s permanent staff. Each year, the Group provides stable benchmark indices covering the entire Group and each individual entity. The indices are used to define local GHG emission reduction plans and drive national initiatives.

(1) See note on methodology – optimization of the number of indicators.

94

UNIVERSAL REGISTRATION DOCUMENT 2019 | GROUPE BPCE

www.groupebpce.com