GECINA - REFERENCE DOCUMENT 2017

RISKS Risks

1 st line of control 2 nd line of control 3 rd line of control

I N T E R N A L A U D I T E X E C U T I V E M A N A G E M E N T B O A R D O F D I R E C T O R S

L e g a l D e p a r t m e n t

F i n a n c i a l C o n t r o l

DR C o m p a n y S e c r e t a r y

Watch & control

Identify & assess

DID

RISK MANAGEMENT

M a n a g e m e n t P r o p e r t y R i s k

I T S e c u r i t y

Reporting & communication

Definition of the action plan

DB

R i s k s , C o m p l i a n c e & o n g o i n g C o n t r o l E X T E R N A L A U D I T E X E C U T I V E C O M I T T E E B O A R D O F D I R E C T O R S

06

DID = Investments and Development Department DB = Offices Department DR = Residential Department

Internal rules and Delegation of powers and authorities CAR - Audit and Risk Committee

1 st line of control

2 nd line of control

3 rd line of control

The second line of control corresponds to the various functions set up by management to monitor risk control and compliance. This line consists of functional departments responsible for areas of expertise, and functions dedicated to managing the global risk control process.

The third line of control ensures the effectiveness and consistency of the first two lines. It is composed primarily of Internal Audit, which reports to the highest level of the organization, as well as external auditors to provide independent assurance.

The first line of control corresponds to the controls directed by management and consists of the operating managers responsible for assessing and mitigating risks.

177

GECINA - REFERENCE DOCUMENT 2017