BPCE - Risk Report - Pillar III 2020

NON-COMPLIANCE AND SECURITY RISKS

BUSINESS CONTINUITY

Business continuity 11.3

The management of business interruption risk is handled from a cross-business perspective. This includes the analysis of the Group’s main critical business lines, notably liquidity, payment instruments, securities, individual and corporate loans, and fiduciary activities.

Organization

The Group Business Continuity department, which reports to the Group Security division, performs its tasks independently of operational divisions. These include: managing Group business continuity and coordinating the • Group Business Continuity function; coordinating the Group’s crisis management; • managing the implementation of the Group Contingency and • Business Continuity Plans (CBCPs) and keeping them operational; ensuring compliance with regulatory provisions governing • business continuity; participating in Groupe BPCE’s internal and external bodies. • The treatment of the situation resulting from the Covid-19 pandemic confirmed the relevance of the crisis management guidelines adopted, both in terms of the measures and the tools deployed; However, the Group remains aware that these

provisions cannot be reproduced for all types of crisis and has therefore developed other responses adapted to the various possible contexts. Although fully mobilized by the fight against the effects of the health crisis, the teams continued the usual activities to improve the resilience of the systems: risk analyzes, using a mapping tool (ArcGIS), in order to check • the consistency of the systems with an acceptable level of risk; the validation of a Group BCP management tool (Drive) by • client establishments, future beneficiaries; continued qualification of the criticality of services within the • framework of the framework of contracts in progress; the creation of a working group and the proposal of a cyber • resilience routing sheet to better address the risk of extreme chaos.

11

219

RISK REPORT PILLAR III 2020 | GROUPE BPCE