Groupama // Universal Registration Document 2022

4

CORPORATE SOCIAL RESPONSIBILITY (CSR) Declaration of Extra ‑ financial Performance

4.2.2

CSR ISSUES AND ASSOCIATED RISKS

4.2.2.2 A total of 15 significant risks are presented in the DEFP, as well as two issues/risks related to areas at the borders of society and the environment and three risks or themes required by regulations. The DEFP also presents the comments and indicators required by the European Taxonomy regulation on sustainable activities (investments and non ‑ life insurance). At the end of the document, in the summary table of risks, themes, and key performance indicators, the risks in the Group’s classifications that are linked to CSR risks are indicated. risks or topics that must be reported according to the regulations. ❯ The CSR actions carried out as part of the Group’s CSR strategy are presented in the DEFP according to the standard breakdown of CSR areas, thus in relation to our 5 commitments (pillars or foundations according to our name): a human, attentive, and responsible customer relationship: in societal challenges/risks (quality of advice and customer service/satisfaction, as well as methods of interaction with members and customers); ❯ protection solutions that respond to changes in the environment and lifestyles: in societal challenges/risks (taking into account the protection needs and risks of our members and customers, prevention) and in environmental risks (adaptation or mitigation in relation to climate change); ❯ an active contribution to the sustainable development of local life: in societal commitments in favour of sustainable development (a player in the regions, in economic and societal dimensions); ❯ a clear, public, and Group ‑ wide sustainable investment and savings policy: in societal challenges/risks (the “ESG” criteria in investments and the sustainable savings offering) and environmental risks (actions linked to responsible asset management commitments in relation to global warming); ❯ a committed group where everyone acts with pride in line with our values: reducing the carbon footprint mentioned in the section on adapting our organisation to climate change (the Group’s ecological footprint), responsible management (social challenges and risks), “native” CSR approach (particularly in terms of societal challenges and risks, as well as the development of the purchasing policy with CSR criteria). ❯ CSR strategic challenges and identified risks

4.2.2.1 Risk assessment In connection with Order No. 2017 ‑ 1180 published on 19 July 2017, the Group’s CSR risks were specifically mapped in order to prepare this declaration. This rating was done in view of the social, societal, and environmental issues associated with our business model. CSR risks are intended to complement the current global management of the Group’s risks. The approach to the work, led by the CSR team with the assistance of the Group Risk Department, was as follows: first, classify and express “CSR” risks (for which there is currently no official normative list ) and simultaneously construct an evaluation grid (matrix) for these risks, based in particular on the COSO method . This list of risks and the assessment methodology were then sent to the business and Risk Departments of the Group’s entities for an initial rating, done as much as possible in gross terms . Lastly, the feedback from this rating made it possible to decide which of the CSR risks were “significant” and validated for the first time by the Group’s Ethics Committee on 11 December 2019. The evaluation was done based on an expert assessment. The scope mainly concerned our main businesses and businesses lines in France. The risk rating depends on the probability of occurrence and the sum of the potential impacts (with an additional assessment factor, which is the incident already experienced or not). The mapping was revisited in 2021, with a gross and net rating with the assistance of the Group Risk Management Department. The Group’s Ethics Committee validated this last analysis on 16 November 2021. The CSR risks indicated in this document as “significant” are those that appear in the gross rating as “very high” or “high”. On 13 December 2022, the Group Executive Committee noted that the CSR risk mapping would be attached to the Group major risk mapping. An annual review of the update of extra ‑ financial risks was carried out with the Group Risk Department on 16 December 2022. The list of significant risks was not modified. In addition to this mapping work, the following are indicated in this declaration: (1) (2) (3) (4) risks that are already incorporated into the Group Major Risks framework; ❯

(1) (2) (3) (4)

Sources: the CSR reporting guide for the insurance sector produced by the FFA in 2018 as well as the 2015 practical guide of the ORSE (Observatory on corporate social responsibility), of which Groupama is a member. Enterprise risk management to environmental, social and governance ‑ related risks, COSO, October 2018.

In other words, intrinsic risk before risk control measures. Assessment taking into account the risk control mechanisms.

78

Universal Registration Document 2022 - GROUPAMA ASSURANCES MUTUELLES