125 / 302
Corporate governance
Internal control
the Group General Management has established rules of
●
manage incidents;
●
governance limiting the powers of the corporate officers of each
notify general management of any event that is likely to have an
●
legal entity; prior approval by the Board of Directors or the
impact on the Group’s image or financial performance.
equivalent body of the Company concerned is required for some
Adopting and implementing risk management principles is delegated
transactions; delegations of powers and responsibilities are
to the country executive directors, whose mission is to identify, analyse
established at country and Group levels in accordance with
and handle the main risks they incur.
hierarchical and functional organisational charts. This structure
The Group risks & compliance department leads the risk management
complies with the principle of the separation of tasks;
system and provides methodological support to the operational and
lastly, this structure is conveyed by a management framework that is
●
functional departments through the deployment of an assessment and
underpinned by medium-term objectives organised according to
mapping tool for major risks whilst developing mapping of operational
country and by the steering of activities orientated in line with
risks.
annual budget targets and corresponding to individual plans.
Twenty-three risk factors have been identified by the Group and are
B. Functioning of internal processes
presented in the management report. These factors cover five themes:
the business environment, strategy and governance, operations,
Each process is subject to formal procedures and operational methods
financial risks and financial services.
for each country, which stipulate ways of carrying out an action or
The risk assessment tool is completed each year by the Country
process in accordance with the Group’s regulatory framework.
executive directors on the basis of identified risk factors. These
the Group has established a Group regulatory framework to cover
●
assessments are reviewed during an interview with the Group risks &
the main risks to its assets. Implementation of this framework is
compliance department
mandatory for all countries;
The Group risks & compliance department has also implemented a
the country executive directors have established procedures and
●
mapping risks from external sources, health risks, natural risks, risk of
operating methods, including control activities required to cover all
crime and terrorism and legal risk, while conducting studies on
the strategic, operational and asset risks relating to their businesses
emerging risks and supporting certain operational departments. It also
and organization. These procedures and operating methods include
supports the Purchasing departments in their knowledge and
and extend the key controls set out in the Group regulatory
evaluation of supplier risk.
framework.
In operational terms, the Group risks and compliance department
C. The risk management system
coordinates and leads a network of Risk Prevention Directors present in
all Group countries. Since 2011, a Risk Prevention Charter defines the
The risk management system implemented by the Group relies
scope of action, the role and responsibilities of the country-level Risk
primarily on identifying, analysing and addressing significant risks
Prevention units, and the ethical rules they must follow.
likely to affect people, assets, the environment, the Group’s objectives
In each country where the Group operates, a Risk prevention
and its reputation.
department is responsible for the security of the Company’s tangible
The Group incorporates risk management into its day-to-day business
and intangible assets and ensures the safety of persons present on its
practices. Risk management is a job shared by all employees with the sites. It is tasked with implementing the human, organisational and
aim of developing a risk management culture.
technical resources necessary to manage both accidental and
intentional risks (natural disasters, malicious acts, theft etc.).
In particular, the system aims to:
The safety of persons and property is one of the essential elements of
create and preserve the Group’s value, assets and reputation;
●
the risk management system, ensuring:
increase the security of the Group’s decision-making and
●
procedures to promote achievement of objectives;
protection suitable for the Group’s clients, employees, service
●
providers and sites;
mobilise Group employees to adopt a shared vision of the principal
●
risks and raise their awareness of the risks inherent in their
regulatory compliance of sites throughout the country where the
●
business.
Group does business;
The Country executive director, with the support of the Group risks & protection and enhancement of the Group’s image and reputation.
●
compliance department, are responsible for risk management within The prevention policy relies on risk mapping, loss analysis and
the Group.
identification of emerging risks as part of its ongoing oversight and
specific studies.
The country executive director:
perform regulatory watch and recognize impacts;
●
establish procedures and suitable measures for preventing and
●
protecting against occurrence and limiting impacts;
2015 REGISTRATION DOCUMENT
125