Groupe Renault - 2020 Universal Registration Document

100 GROUPE RENAULT I UNIVERSAL REGISTRATION DOCUMENT 2020 Find out more at group.renault.com 01 INTERNAL CONTROL AND RISK MANAGEMENT GROUPE RENAULT the Regulatory Committee, which reviews major regulatory P changes, prudential supervision and action plans, and validates internal rating models and the associated management policy; the Internal Control, Operational Risk and Compliance Committee, P which oversees the group’s entire internal control system, monitors quality and related procedures, and adapts resources, systems and procedures. It defines, manages and monitors the principles of the operational risk management policy and compliance control system. It also keeps track of action plans. This committee also exists within each RCI Banque group subsidiary; the New Product Committee, which approves new products before P they are marketed, by ensuring the compliance of the new products with the group’s commercial policy, the group’s budget requirements, locally applicable legislation, and group risk governance. Process Owners have been appointed for each macroprocess and are responsible for risk management in their respective areas of expertise in line with group standards, defining and updating the corresponding procedures and first-level controls. Regulatory Monitoring Officers are responsible for monitoring, analyzing and informing operational staff of any regulatory changes impacting RCI Banque as part of the compliance control system put in place to ensure good corporate governance. The Group Regulatory Compliance Officer for the RCI Banque group reports to the Chief Executive Officer. This Officer is the guarantor of RCI Banque’s compliance in areas such as the fight against money laundering and terrorist financing, ethics, professional whistle-blowing, prevention of corruption, legal, tax and regulatory oversight and the related control plan. group. In terms of internal control supervision in the RCI Banque group subsidiaries, the Director of the Internal Control department is supported by internal controllers who report to him/her functionally. The internal controllers report hierarchically to the CEO of the subsidiary. Similarly, the Director of the Internal Control department is supported by employees within the central functions to manage the internal control supervision system within the RCI Banque group departments. The Director of the Internal Control department ( Département du Contrôle Interne , DCI), who reports to the Risk Management Director, is responsible for the permanent control of the organization and direction of the general internal control system for the entire The Director of the Risk and Banking Regulation department ( Département Risques et Règlementation Bancaire , DRRB), who reports to the Risk Management Director, ensures the deployment of the Risk Governance Policy within the group and ensures its consistency with the Risk Appetite Framework (RAF) defined by the Board of Directors; ensures the reliability of risk measurement indicators, the completeness of risk management systems for each risk and the effective exercise of such management; controls, more specifically, the effectiveness of the reporting and alert feedback channels from the subsidiaries to the Corporate departments and prepares a summary report on the risks for the management bodies and the Risks Committee of the Board of Directors, as appropriate; verifies the adequacy of the corrective measures developed in the event of failures and their effective implementation by the management functions; plays a central role in monitoring the group’s compliance with applicable prudential regulations. The Audit and Periodic Control Director for the RCI Banque group reports to the Chief Executive Officer. He/she is independent of the Permanent Control department and works with the different subsidiaries based on an annual audit plan validated by the Audit and Accounts Committee. Audits result in written reports including recommendations that are submitted to the Internal Control Committee and the Audit and Accounts Committee. These findings and recommendations are presented in the annual report on internal control.