SOPRA_STERIA_REGISTRATION_DOCUMENT_2017

CORPORATE RESPONSIBILITY Report by the independent third party on the consolidated workforce-related, environmental and social information

Report by the independent third party on the consolidated workforce-related, environmental and social information presented in the Management Report

Financial year ended 31 December 2017

p express, at the Company’s request outside the accreditation scope, a reasonable assurance conclusion that the information selected by the Company and identified by a √ sign in the “2017 Corporate Responsibility Report” chapter of the Management Report is presented, in all material respects, in accordance with the Guidelines. However, it is not our responsibility to issue an opinion on compliance with any other applicable statutory requirements, including those provided for in Article L. 225-102-4 of the French Commercial Code (duty of care plan) and by the anti-corruption Sapin II Act (French law no. 2016-1691 of 9 December 2016). Our work was carried out by a team of six people between October 2017 and March 2018, and required a total of about 12 weeks. We conducted the work described below in accordance with the administrative order of 13 May 2013 setting forth the manner in which an independent third party should perform its engagement, the professional guidance issued by the CNCC for this type of engagement, and, with regard to the reasoned opinion on the fair presentation of CSR Information and the reasonable assurance conclusion, in accordance with the ISAE 3000 international standard. I – Statement of completeness of CSR Information On the basis of interviews conducted with the management of the departments concerned, we obtained an understanding of the Company’s sustainability strategy, in line with the social and environmental issues raised by its activities and the Company’s civic commitments and, where applicable, any initiatives or programmes arising from them. We compared the CSR Information presented in the Management Report with the list provided in Article R. 225-105-1 of the French Commercial Code. For any consolidated information that was not disclosed, we verified that the explanations provided complied with the provisions of Article R. 225-105, paragraph 3 of the French Commercial Code. We ensured that the CSR Information covered the scope of consolidation, i.e. the Company, its subsidiaries as defined by Article L. 233-1 and the entities it controls as defined by Article L. 233-3 of the French Commercial Code within the limitations set out in the methodological information presented in the “Approach and methodology” section of the Management Report. Based on this work and given the limitations mentioned above, we attest to the completeness of the required CSR Information in the Management Report.

To the Shareholders, In our capacity as an independent third party, member of the Mazars network and a Statutory Auditor of Sopra Steria Group, certified by COFRAC under number 3-1058 (made available on www.cofrac. fr), we hereby report to you on the consolidated workforce-related, environmental and social information for the year ended 31 December 2017, presented in the Management Report (hereinafter referred to as the “CSR Information”), pursuant to the provisions of Article L. 225- 102-1 of the French Commercial Code. Responsibility of the Company The Board of Directors is responsible for preparing a Management Report including the CSR Information required by Article R. 225-105-1 of the French Commercial Code, in accordance with the guidelines used by the Company (hereinafter referred to as the “Guidelines”), which are summarised in the Management Report and are available on request from the Company’s registered office. INDEPENDENCE AND QUALITY CONTROL Our independence is enshrined in the regulations, the Code of Ethics governing the audit profession in France and the provisions of Article L. 822-11-3 of the French Commercial Code. We have also implemented a quality control system comprising documented policies and procedures for ensuring compliance with ethical standards, and the applicable legal and regulatory requirements. RESPONSIBILITY OF THE INDEPENDENT THIRD PARTY On the basis of our work, it is our responsibility to: p certify that the required CSR Information is presented in the Management Report or, in the event that any CSR Information is not presented, that an explanation is provided in accordance with the third paragraph of Article R. 225-105 of the French Commercial Code (Statement of completeness of CSR Information); p express a limited assurance conclusion that the CSR Information taken as a whole is, in all material respects, fairly presented in accordance with the Guidelines (Reasoned opinion on the fair presentation of CSR Information);

114

SOPRA STERIA REGISTRATION DOCUMENT 2017