Download the report - April.com

01. MAIN DOCUMENTduring internal audit assignments carried out in Groupcompanies, as well as recommendations from externalplayers (primarily statutory auditors and legal advisers).The risk manager informs and advises the executivemanagement, and reports on this mission to theSustainable Development Committee.Each type of risk is subject to a review aimed at assessingthe level of risk and, if necessary, at eliminating,transferring or reducing the residual risk. The company’smanagers are responsible for implementing the actionplan defined in connection with the audits or mappingprocesses, formally reporting at least once a year duringthe Strategic Committee meetingAt the same time, the Group internal audit managerensures the coherency and efficiency of internal controlwithin Group companies. He coordinates and controlsthe activities of all the Group’s internal audit players.An annual audit plan is drawn up, factoring in exposureto risks in the various Group companies as it has beenanalysed, notably during annual risk-mapping processes.This plan concerns all the companies in the Group.The plan for Year N is validated at the end of Year N-1 bythe executive management. It is formally reviewed andpresented to the Sustainable Development Committeetwice a year for follow-up. It may also be updated as andwhen necessary according to the priorities identified overthe course of the year.Several types of mission are carried out: cross-businessand thematic internal audit procedure optimizationmissions, specific audit and control missions, follow-upmissions for companies recently incorporated into theGroup, and follow-up missions on previous audits.A written report is drafted along with a synopsis of therecommendations issued further to all such missions. Foreach recommendation, a deadline is set and a managerappointed.In 2009, internal audit missions were carried out in 18Group companies. Alongside these audits carried out bythe Group Risk Manager, 62 internal audit assignmentsand 70 internal control improvement assignments wereperformed by the Group's divisions or companies. Thebreakdown of these assignments across the entire Groupis as follows for each area and each business division:Types of risks coveredBreakdown of assignmentscarried out in 2009Strategic steering and implementation 17 %Management of claims, services and compensation 10 %Personnel relations 9 %Underwriting 8 %General review of internal control 8 %External growth 8 %Unsuitable documentation 7 %Organizational strategy 5 %Fraud and malicious acts 4 %INFORMATIONON THE COMPANY’S ACTIVITIESPART0134Other laws and regulations 4 %Image 3 %Tax and accounting 3 %Other types of risks 14 %