- 1 1 7 -

- The horizontal axis shows the perspective of stakeholders.

The CMA CGM Group ranking was established in a meeting with all the Sustainable Departments representatives. Stakeholders were identified based on their influence

on Group business: customers, employees, trade unions, suppliers, subcontractors, government, public authorities, investors, banks, NGOs, media, professional organisations and local communities. In 2020, customers, suppliers and employees were interviewed in order to rank the 13 CMA CGM sustainable priorities from top to least.

2020 Sustainable risks With support from the Group Risk Management department, a CSR risk map was established. In 2020, risks in the Group risk map were assessed along with specific risk maps to assess their relationship

with the 13 CSR challenges listed in the materiality matrix. This enabled us to identify: - discrepancies between the risk level assessed in

the risk maps and the assessment performed at materiality matrix level. Differences were documented and explained.

- challenges for which no risks had been identified. The

missing risks will be assessed.

To date, the following CSR-related risks have been identified:

- Risk of non-compliance with ethics and compliance regulations, particularly regarding competition, corruption, economic sanctions and personal data protection

- Human rights and working conditions - Health, safety & security - Climate change and air quality - Pollution and harm to biodiversity - alent development - Partnerships with suppliers and subcontractors

Group Risk Management is responsible for: - Structuring, deploying and driving the Group s risk

management framework - Identifying, assessing and monitoring the Top Risks for

CMA CGM Group - Establishing focused risk maps for entities and

functions, or for strategic projects - Defining and monitoring Key Risk Indicators

- Performing country risk scoring.

The methodology involves a qualitative and quantitative assessment at a point in time projected over a year. The risk assessment is based on two criteria: - Severity of impact - Probability of occurrence

The methodology integrates a qualitative/quantitative assessment at a point in time projected over a year. The risk evaluation is based on two criteria: - Severity of impact - Probability of occurrence

The following information has been deemed to be outside the scope of the Group s business activity: - Combat against food insecurity - Combat against food waste - Protection of animal welfare - Responsible, fair and sustainable food