Annual Activity Report 2025

RISK CONTROL AND VIGILANCE PLAN Methodology: risk mapping and risk management

3.2 Methodology: risk mapping and risk management

3.2.1 Risk management policy and methodology The group has created a risk management system consistent with the recommendations of the Autorité des marchés financiers (AMF), the professional standards of the Committee of Sponsoring Organizations of the Treadway Commission (COSO), and the changes in law and regulations concerning the CSRD (Corporate Sustainability Reporting Directive) and the duty of vigilance. The system is also implemented in accordance with the requirements of the Sapin II law, concerning the risks of corruption and influence peddling.

The Risk Management Division of the Risk, Compliance and Internal Audit Department, reporting to group Executive Management, develops the methodological tools shared throughout the group. Risks are identi fi ed using a Business Risk Model (BRM) to reference major group risks into six main categories to date: ● macro and external risks such as climate change or geopolitical risks; ● strategic risks related, for example, to competition or partnerships; ● fi nancial risks; ● operational risks; ● risks related to the group’s social, societal, and environmental responsibility; and ● risks related to ethics, governance, compliance, and integrity in business practices. The Orano risk benchmark is designed to evolve over time by incorporating best practices and feedback from users, and changes made to regulations.

3

A risk-assessment campaign is undertaken annually to take into account the potential impact of events on the achievement of the group’s strategic and operational objectives. Its main objectives are: ● the formal identi fi cation of every type of risk; ● the analysis and assessment of these risks in order to prioritize them; and ● the de fi nition and monitoring of the implementation of action plans to control them.

ORANO GROUP RISK MAPPING PROCESS

Audit and ethics committee

TOP DOWN

Arbitration and validation after review of the "Top risks" by the executive committee

%JKGH 'ZGEWVKXG 1HƓEGT

Coordination and follow-up Guidelines "Top risks" proposal

Risk committee

Consideration of any changes in the methodology

Process management and summary

4KUM %QORNKCPEG +PVGTPCN #WFKV &GRCTVOGPV

1TCPQ ITQWR functional FGRCTVOGPVU

Comments and feedback concerning risk management

1TCPQ ITQWR business units

BOTTOM UP

Management entities

Source: Orano

67

Orano - Annual Activity Report 2025