CAPGEMINI_REGISTRATION_DOCUMENT_2017

CORPORATE GOVERNANCE - RISKS{AND INTERNAL{CONTROL

2.5 Risks and internal control

Measures implemented as part of constant improvements to risk 2.5.4 management and internal control systems a. Focus on the main measures implemented in{2017

roll-out of a global application for personnel management and X the implementation of a new performance management information system; definition of a People Safety global governance system; X overhaul of the management process for international travel; X a Group-wide international mobility program; X a strategic review of talent with the identification of actions X focusing on management teams of the main units and the formal documentation of succession plans. b. Constant improvement measures in 2018 The risk management process will continue to be rolled out in 2018 based on the most recent risk mapping updated in 2017. Close attention will be paid to the consistency of the internal audit plan (3 rd {line of defense) with the actions implemented to reduce priority risks. As part of measures to improve risk management and internal control systems, in 2018 the Group will: roll-out an integrated compensation management tool X Group-wide; finalize a crisis management plan, to optimize governance and X notably reduce exposure to reputation risk; complete the roll-out of the Group IT network access control X tool, extended to cover functional applications and integrating segregation of duty control rules.

During 2017, the Group implemented and deploys a number of measures aimed at rolling-out and standardizing processes and procedures within the Group and thereby strengthening the Group's internal control environment. Among these measures, the following may be highlighted: validation of the Group’s risk management policy by the Audit X and Risk Committee; continued update of the risk mapping including the X identification and assessment of major Group risks; formal documentation of priority risk action plans, their X validation and monitoring by the Group Risk Committee; formal documentation of a crisis management plan at Group X level; global roll-out of a travel expense solution with direct X payment by credit card and audit rules integrated into the tool; central monitoring of all real estate transformation projects, X designed to manage operating risks and for financial control; an audit program of internal and external risks at Group X operating sites, in partnership with an external consultant, covering environmental, health and safety issues; global optimization of Human Resource governance; X definition of a global procedure and roll-out of a policy for X sales-based compensation around the world, integrating a three-year plan beginning in 2015, aimed at aligning all Business Units;

2

117

REGISTRATION DOCUMENT 2017 — CAPGEMINI