Consolidated Financial Statements and Consolidated Management ...

47. Listed companies have an internal audit which, supervised by the Audit Committee, ensures the correct operation of the information and
internal control systems.
Complies
48. The manager of the internal audit presents their annual work plan to the Audit Committee; they directly report the incidents that occur
and submit an activity report to the Committee at the end of every year.
Complies
49. The risk management and control policy identifies at least the following:
a) The different types of risk (operational, technological, financial, legal, reputation-related, etc.) to which the company is exposed, including
contingent liabilities and other off-balance sheet risks among financial and economic risks;
b) The level of risk that the company considers acceptable;
c) The measures planned to mitigate the impact of identified risks should they materialise;
d) The internal control and information systems that will be used to control and manage the aforementioned risks, including contingent liabilities
or off-balance-sheet risks.
See sections: D
Complies
50. The following correspond to the Audit Committee:
1. In relation to internal control and information systems:
a) Supervise the process of preparing and safeguard the integrity of the financial reporting relating to the company and, should it be the case, to
the group, reviewing compliance with regulations, the adequate delimitation of the consolidated group and the proper application of accounting
standards.
b) Periodically review the internal control and risk management systems so that the principal risks are identified, managed and appropriately
recorded.
c) Ensure the independence and effectiveness of the internal audit; propose the selection, appointment, re-election and removal of the
internal audit service manager; propose the budget for this service; receive periodic information about its activities; and verify that senior
management takes into account the conclusions and recommendations of its reports.
d) Establish and supervise a mechanism that allows employees to confidentially, and as applicable anonymously, communicate any potential
irregularities, particularly financial and accounting, they discover within the Company.
2. In relation to the external auditor:
a) Submit proposals to select, appoint, re-elect and substitute the external auditor, as well as the conditions of their contract, to the Board
of Directors.
b) Receive information about the audit plan and its results from the external auditor on a regular basis and verify that senior management
takes its recommendations into account.
c) Ensure the independence of the external auditor, and for this purpose:
i) That the company notifies the Spanish Securities and Exchanges Commission of the change of auditor as a significant event and
accompanies it with a statement about the existence of disagreements with the outgoing auditor and the content of such disagreements,
if they exist.
ii) That it ensures that the company and the auditor follow prevailing regulations on the provision of services other than audit services, the
limits on the concentration of business with the auditor and, in general, any other regulations established to ensure the independence of
the auditors;
iii) That in the case of the resignation of the external auditor, to examine the circumstances that may have caused it.
d) In the case of groups, encourage the group auditor to take responsibility for the audits of the companies that comprise it.
See sections: B.1.35, B.2.2, B.2.3 and D.3
Complies
51. The Audit Committee may summon any employee or director of the company, and may require the appearance of the same without the
presence of any other director.
Complies
52. The Audit Committee notifies the Board, prior to it adopting the corresponding decisions, about the following issues indicated in
Recommendation 8:
a) The financial information that, as a listed company, the company must periodically publish. The Committee must ensure that the interim
accounts are drafted using the same accounting criteria as the financial statements, and therefore consider the appropriateness of a limited
review by the external auditor.
b) Setting or acquisition of stakes in special-purpose entities or those domiciled in countries or territories deemed to be tax havens, as well as
any other transactions or operations of an analogous nature which could erode the group’s transparency due to their complexity.
c) Related party transactions, unless another supervision and control committee is has been appointed to draw up the report.
See sections: B.2.2 and B.2.3
Complies
50
ANNUAL CORPORATE GOVERNANCE REPORT