NATIXIS // 2021 Universal Registration Document

RISK MANAGEMENT

Risk management: a key issue

The economic environment remains strongly marked by uncertainties related to the Covid-19 pandemic, central bank policies and geopolitical tensions. In this context, the guidelines of the 2024 Strategic Plan have been drawn up in line with the Risk Appetite Framework. Adaptations to the risk supervision framework have been implemented andwill continue to support changes in our business lines and anticipate emerging risks.

Risk governance

Natixis has set up a risk management system rolled out throughout the Company and supervised by the Board of Directors.

BOARD OF DIRECTORS and its special committees

SENIOR MANAGEMENT COMMITTEE

Main committees chaired by Senior Management contributing to risk supervision

Global Risks Committee

Culture & Conduct Committee

Special Risk Committees (Credit, Market, Operational, Model, etc.)

ALM Committee

BPCE

FIRST LINE OF DEFENSE

SECOND LINE OF DEFENSE

THIRD LINE OF DEFENSE

Control Functions Coordination

COMPLIANCE FUNCTION

Group Internal Control Coordination Committee (3 CIGs) and Special Committees

GENERAL INSPECTION

COMPLIANCE GLOBAL TECHNOLOGY RISK MANAGEMENT

OPERATIONAL DEPARTMENTS Controls 1.1 (operational) Controls 1.2 (hierarchical / functional)

Committee (CFCC)

IT RISKS SECTOR

RISK FUNCTION

RISKS

FINANCIAL CONTROL FUNCTION

PERMANENT FINANCIAL CONTROL

INTERNAL AUDIT FUNCTION

Permanent control under the responsibility of the Secretary General, executive officer ("dirigeant effectif")

Periodic control

Risk management system The Risk Appetite Statement and the Risk Appetite Framework define and frame the nature and level of risk that Natixis agrees to take as part of its business model and strategy. They are drawn up annually in line with the bank’s strategic and financial management exercises and Groupe BPCE’s risk appetite framework. They are reviewed by the Senior Management Committee and approved by the Board of Directors.

Natixis risk appetite principles are ar ticulated in the Risk Appetite Statement . In particular, they establish the search for sustainable and consistent profitability and the refusal to commit to uncontrolled activities, with a view to creating sustainable value for all stakeholders. They are fully in line with Natixis' ambitious Corporate Social Responsibility strategy and the promotion of a strong risk culture.

Risks considered as material for Natixis are governed by indicators and tolerance thresholds defined in the Risk Appetite Framework . These indicators are subject to regular and consolidated monitoring, presented to the Senior Management Committee and to the Risk Committee of the Board of Directors. Any breach of the tolerance thresholds is subject to a notification and escalation procedure.

12

NATIXIS UNIVERSAL REGISTRATION DOCUMENT 2021