ORANO // Annual Activity Report 2024

Orano - Annual Activity Report 2024 74 3 RISKS, CONTROL AND DUTY OF VIGILANCE PLAN Risk factors 3.3.2.5 Risks related to the impact of climate change on our facilities and activities Description of the risk Orano has industrial sites in France and abroad and its activities are based on logistics flows and global supply chains. As such, the group is exposed to a growing number of extreme events due to climate change likely to affect the safety of facilities (natural disasters, pandemic, etc.), as well as to risks of chronic disruptions, more or less slow and gradual (rise in sea and ocean levels, heat waves, strong winds, etc.). Based on studies carried out by the group on the robustness of facilities in the face of climate change, there is a moderate risk of slowdown or temporary shutdown of fuel cycle or mining facilities, as well as a risk of disruption to logistics flows. Risk management measures In order to assess the regional trends for the coming decades, the group monitors forecasts of expected future climate hazards (temperature, precipitation, etc.) applied to the group’s main industrial sites in France and abroad, logistics flows and supply chains. These forecasts are made on the basis of climate models available according to the scenarios of the Intergovernmental Panel on Climate Change (IPCC), in particular RCP 4.5 and 8.5, the most pessimistic scenario. The meteorological data of the sites are also analyzed, in order to assess the trend observed over the last 20 years. These studies make it possible to assess the robustness of the facilities and activities to climate change. The group has adopted adaptation plans following these analyses. Vigilance measures relating to the impacts of global warming on the group’s facilities and activity are described in Section 4.1.3.2 of the 2024 Annual Activity Report. 3.3.2.6 Cybersecurity risks Description of the risk The group uses various technologies (databases, servers, information and communication tools, etc.) to conduct its commercial and industrial activities. Given the emergence and diversification of cyberattacks in recent years, the risks relating to information systems have increased considerably. The group identifies three types of threats: criminal, ideological, and State. Due to its geographical location and the nature of its activities, the group is exposed to the risks of cyberattacks. A successful cyberattack could lead to a loss of control of the information system, an interruption of service, a takeover of the information system by malicious third parties, data theft, destruction or breach of data integrity and disclosure of personal data. Cyberattacks and their consequences can have a significant impact on the group’s operating activities, its financial and legal position and its reputation. The measures implemented by the group in terms of cybersecurity are described in the Section 4.1.5.4 of the 2024 Annual Activity Report. Risk management measures Orano pays the greatest attention to cybersecurity and data protection risks, including personal data. The risk of IT attacks is the subject of specific action plans such as the implementation of a “red button” (emergency procedure to isolate information systems) or the implementation of a security policy for its information systems, including cybersecurity objectives and a cyber crisis organization. 3.3.2.7 Risks related to subcontracting and suppliers Description of the risk Due to the nature of its activities, Orano is exposed to the operational continuity of supply chains and the proper execution of its contractual relationships with suppliers, as well as to availability risk (supply disruptions and tensions) and logistical risk relating to the materials, equipment or services required for its activities. These risks may be exacerbated by geopolitical crises, such as the Russo-Ukrainian conflict, which affect access to importing and exporting the materials needed for the group’s activities. Risk management measures The group’s purchasing activities are governed by the group’s purchasing and supply chain process. The actions taken and the measures taken by the group to identify, prevent and reduce the risks of serious harm to health, safety and security, the environment and human rights and fundamental freedoms are detailed in the duty of vigilance plan in Section 3.4. Orano’s documentary framework for subcontracting and purchasing is described in Section 4.4.1.6 Building sustainable and virtuous relationships with suppliers. 3.3.2.8 Risks related to transportation safety and security Description of the risk The group is exposed to the risk of accidents during the transportation of radioactive material or hazardous chemical substances by rail, sea or road. It remains dependent on Stateprovided infrastructure through which transport may transit and exposed to possible malicious acts or terrorism. The group implements a “transportation supervision” process, aiming to control operational, security, physical protection, media and industrial risks to transportation involving Orano. Despite these measures to ensure the safe transport of radioactive materials or chemical substances, the group cannot guarantee a total absence of accidents or impacts on its operations.

RkJQdWJsaXNoZXIy NzMxNTcx