IBERSOL | Integrated Management Report | 2025

INTEGRATED MANAGEMENT REPORT 2025 opportunities and threats that Ibersol’s businesses face in pursuit of their value creation goals. In the context of strategic planning, the risks of the business portfolio, as well the risks of development of new businesses and the implementation of the most important projects are identified and assessed, and strategies to manage those risks are defined. At operational level, the risks of each business are identified and assessed and actions are planned to manage those risks. These actions are included and monitored within the scope of business plans and functional units. As regards the risks to the security of tangible assets and persons, policies and standards have been established and are monitored to ensure compliance. All units are subject to external audits and preventive and corrective measures are taken in respect of the risks that have been identified. The probability and impact indices of the “risk groups” are obtained through the average of the probability and impact indices of the respective risk components, being essentially qualitative in nature. To ensure compliance with the established procedures, the Group’s main internal control systems are evaluated periodically. 55. Main elements of the internal control systems and risk management implemented by the company regarding the financial disclosure process. The Company does not have any internal audit services reporting directly to the Supervisory Board (given the classic model adopted), the necessary compliance services being ensure by the individual departments of the company. Considering that, organically and functionally, the different Directions of the Group direct the “compliance” services in articulation with the Board of Directors and the Supervisory Board and being the respective heads of these different Directions duly identified in the Company’s organization chart, it is important to restate that they act in interaction with the Board of Directors and the Supervisory Board, regardless of the hierarchical relationship that these Departments maintain with the Executive Management of the Company. 291