IBERSOL • 2023 Integrated Management Report

CORPORATE GOVERNANCE REPORT complaints about irregularities detected in the Company. As set forth in the Regulations of the Audit Board, which are published on the Company’s website, this organ keeps a written record of reports of irregularities that are addressed to it, and, when considered appropriate, takes the necessary steps together with the Board of directors and the auditors, and prepares a report on the irregularities. Therefore, these irregularities can be communicated in a non-anonymous way to the Audit Board, through a communication to the Company addressed to the Audit Board. The Company will send the reports received to the Chairman of the Audit Board, ensuring confidentiality. Furthermore, in 2022, theCompany approved and implemented an Internal Procedure for Reporting Irregularities (Whistleblowing), in compliance with the obligations arising from Law no. 93/2021, of 20 December, which is applicable to the Ibersol Group companies and ensures the rights of anonymity, confidentiality and absence of retaliation in the event of a report. Therefore, for the purpose of reporting irregularities, under the aforementioned Law No. 93/2021, of 20 December, which establishes the General Protection Regime for Whistleblowers, as well as the Decreto-Lei n.º 109-E/2021, of 9 December, which establishes the General Corruption Prevention Regime, the Group companies have their own whistleblowing channel available through an email address that is duly informed on the Company’s website at: https://www.ibersol.pt/investidores/canal-de- denuncias/”. III. Internal Control and Risk Management 50. Individuals, bodies or committees responsible for internal audit and/ or implementation of internal control systems. Ibersol does not have autonomous internal audit and compliance services. Risk management, as part of the company’s culture, is present in all processes and is the responsibility of all managers and employees at the different organization levels. Risk management is undertaken with the goal of creating value by managing and controlling uncertainties and threats that may affect the Group companies, with a view to the continuity of operations, to take advantage of business opportunities. 316