BPCE - Risk Report - Pillar III 2020

RISK MANAGEMENT SYSTEM

RISK MANAGEMENT

comprehensive review with the Head of Risk Management and/or Compliance; distribution of a newsletter (“Mag R&C”) to the heads of • Group institutions, the heads of the various functions, including Sales, and the employees of the Risk, Compliance and Permanent Control functions as well as all Group employees; For coordination purposes, the Risk Governance department relies on a half-yearly report drawn up by the institutions, aimed at ensuring that the various components of the local systems

are properly implemented and operate under satisfactory conditions, particularly with respect to banking regulations and Group charters. The findings of this report improve operational efficiency and optimize best practices throughout Groupe BPCE. Activities specifically focused on the Lagarde report are being monitored in conjunction with the Group’s institutions. There is also a system in place to monitor anomalies observed at Group institutions, aimed at ensuring that business is conducted properly and the rules of ethics are applied.

3

HIGHLIGHTS Incorporation of the Financial Solutions & Expertise subsidiaries in the Group risk and compliance coordination system: definition of a risk appetite system dedicated to financial solutions & expertise activities; • review and validation of subsidiary risk policies; • deployment and adaption of interim risk and compliance questionnaires to their activity. • Oney Bank: incorporation in the Group’s risk management systems by establishing a risk appetite framework validated by the governance bodies. Strengthened department coordination during the lockdown: near-daily discussions with all players of the Risk, Compliance and Commitments departments.

Risk and compliance culture

To promote and strengthen the risk and compliance culture at all levels, the Risk and Compliance department of the Risk

establishing regular communication on risk and compliance issues throughout the Group, and disseminating and measuring

Governance division is focused on developing risk and the risk and compliance culture. compliance training and awareness programs at all Group levels,

Share

System

Training

Risk & Compliance Academy •

77 training courses, including: • a compliance program (Risk, Compliance and Audit functions); • a specific program for the Inspection Générale division. • A certification program dedicated to the Risk and Compliance departments set up in Paris Dauphine. A banking risk awareness quiz: 200 questions/4 topics (credit risks, financial risks, • non-financial risks and banking environment risks) targeting the employees of the Banques Populaires, the Caisses d’Epargne and the subsidiaries. Climate risk awareness quiz: 200 questions targeting the employees of the Banques • Populaires, the Caisses d’Epargne and the subsidiaries. Annual training provided for Fédération Nationale des Banques Populaires and • Fédération Nationale des Caisses d’Epargne. Targeting the Risk and Compliance departments of the Group institutions and the • employees of BPCE SA (live and replay). Examination of regulatory issues (regulatory outlook, response from regulators and • supervisors on Covid-19, etc.) Coordination of the risk and compliance chapters of regulatory reports (universal • registration document, Pillar III, annual report on internal control, ICAAP). Coordination of Commitment managers of the BPs, CEs and subsidiaries. • Risk assessment of sales functions at Group institutions (New Product Committee, • implementation and updating of sales processes).

Risk Pursuit •

Climate Risk Pursuit •

Training for members of the • supervisory bodies and Risk Committees of the BPs and CEs

Communication

The R&C Hour •

Regulatory workbook included in • the Mag R&C

Regulatory communication •

Sharing of best practices

Sharing of best practices and • cross-analyses between operational entities and control functions Self-assessment of the level of • risk and compliance culture: R&C EVAL system

Measurement of the risk and compliance culture

Questionnaire of 138 questions on risk and compliance culture, based on the • recommendations of the FSB 2014, AFA 2017 and the EBA guidelines for 2018.

33

RISK REPORT PILLAR III 2020 | GROUPE BPCE