Orano - Annual Activity Report 2025 76 3 RISK CONTROL AND VIGILANCE PLAN Risk factors These studies make it possible to assess the robustness of the facilities and activities to climate change. Following these analyses, the group has adopted local adaptation plans that are costed from a financial point of view. Vigilance measures relating to the impacts of global warming on the group’s facilities and activity are described in Section 4.1.3.2 of the 2025 Annual Activity Report. 3.3.2.6 Cybersecurity risks Description of the risk The group uses various technologies (databases, servers, information and communication tools, etc.) to conduct its commercial and industrial activities. Given the emergence and diversification of cyberattacks in recent years, the risks relating to information systems have increased considerably. The group identifies three types of threats: criminal, ideological, and State. Due to its geographical location and the nature of its activities, the group is exposed to the risks of cyberattacks. A successful cyberattack could lead to a loss of control over the information system, a shutdown or malfunction of our information system (management or on the industrial scope), a takeover of the information system by malicious third parties, theft, destruction or breach of data integrity and disclosure of sensitive data (including personal data). Cyberattacks and their consequences can have a significant impact on the group’s operating activities, its financial and legal position and its reputation. Risk management measures Orano pays the greatest attention to cybersecurity and data protection risks, including personal data. The risk of IT attack is the subject of specific action plans, such as: ● the implementation of an information systems security policy that includes cybersecurity objectives as well as a cyber crisis organization; ● the implementation of EDR (Endpoint Detection and Response) solutions to detect, investigate and respond to threats to our IT equipment; and ● specific action plans to improve our resilience. 3.3.2.7 Risks related to subcontracting and suppliers Description of the risk With a supply chain of more than 500 suppliers of goods and services in the various countries where it operates, Orano is exposed to the operational sustainability of supply chains and the proper execution of its contractual relationships with its suppliers, as well as to availability risk (supply disruptions and tensions) and logistical risk relating to the materials, equipment, or services necessary for its activities. These risks may be exacerbated by geopolitical crises, such as the Russo-Ukrainian conflict, which affect access to importing and exporting the materials needed for the group’s activities. For example, in 2023, mining activities were impacted by raw material supply tensions caused by the crisis in Ukraine, and particularly by acid supply difficulties in Kazakhstan, which limited Katco’s production. In addition, suppliers involved in the group’s various projects may not deliver their products or services on time and in accordance with contracts. Such situations may have a negative impact on the group’s business, results, asset value, financial position and/ or reputation. Risk management measures The group’s purchasing activities are governed by the group’s purchasing and supply chain process. The actions taken and the measures taken by the group to identify, prevent, and reduce the risks of serious harm to health, safety, and security, the environment and human rights and fundamental freedoms are detailed in the vigilance plan in Section 3.4. Orano’s documentary framework for subcontracting and purchasing is described in Section 4.4.1.6 of the 2025 Annual Activity Report. 3.3.2.8 Risks related to transport safety and security Description of the risk The group is exposed to the risk of accidents during the transport of radioactive material or hazardous chemical substances by rail, sea or road. It remains dependent on State-provided infrastructure through which transport may transit and exposed to possible malicious acts or terrorism. This is particularly true for international sites located in areas potentially exposed to attempted attacks, where the group provides physical protection in close coordination with the States concerned and their respective armed forces. Despite the measures implemented by the group to ensure the safe transport of radioactive materials or chemical substances, accidents may occur that impact the group’s operations. The occurrence of the risk of accidents during the transport of hazardous materials can have a significant negative impact on the group’s financial health and reputation. Orano could also be subject to court proceedings. Vigilance measures relating to safety and security during transport are described in Section 3.4.2.2 of the 2025 Annual Activity Report. Risk management measures Compliance with the regulations in force on the transport of hazardous materials is ensured by the processes implemented within the Nuclear Packages and Services Business. It implements a “transport supervision” process, aiming to control operational, security, physical protection, media and industrial risks to transport involving Orano.
RkJQdWJsaXNoZXIy NzMxNTcx