Amadeus Annual Report 2010 - Investor relations at Amadeus

The general risk management control policy for the Amadeus Group is aimed at allowing the
Group:
- to achieve the long-term objectives as per the established Strategic Plan;
- to contribute the maximum level of guarantees to shareholders and defend their
interests;
- to protect the Group’s earnings;
- to protect the Group’s image and reputation;
- to contribute the maximum level of guarantees to customers and defend their interests;
- to guarantee corporate stability and financial solidness sustained over time.
Thus, the general risk management control policy is carried out through a set of procedures,
methodologies and support tools which allow Amadeus, especially with the making of a
Corporate Risk Map, to achieve the following objectives:
- To identify the most relevant risks that affect the strategy, operations, reporting and
compliance, following the COSO method.
- To analyze, measure and evaluate said risks with regard to their probability and impact,
following procedures and standards that are homogeneous and common to the entire Group in
order to ascertain the relevance thereof.
- To prioritize said risks pursuant to the level of probability/impact and how they could
affect the Group’s activity or operations, and its objectives.
- To control and manage the most relevant risks through adequate procedures, including
contingency plans that are necessary to mitigate the impact of the materialization of risks. This
is achieved more specifically through the designation of ‘risk owners’ and the preparation of
action plans.
- To evaluate and monitor risks, together with action plans and mitigation measures.
The ultimate purpose is aimed at having a record of the most relevant risks which could
compromise the attainment of the objectives of the Group’s Strategic Plan. This risk analysis is
a fundamental element in the Group’s decision-making processes, both in the sphere of
governing bodies as well as in managing business.
The Risk Map at the Group level defines the twenty most critical risks in the areas relating to
the activity and to the attainment of the Group’s objectives. Highlighted among the latter are
technological risks, operational risks that could affect the efficiency of operational processes
and the provision of services, commercial risks which could affect customer satisfaction,
reputational risks and compliance risks.
Due to its universal and dynamic nature, the system allows considering new risks that could
affect the Group as a consequence of changes in surroundings or adjustments of objectives
and strategies. Periodic comparisons of the Risk Map are made which allow visualizing the
degree of progress in mitigating them or, as the case may be, the appearance of new risks or
increase in those already existing.
D.2 Please specify whether any of the different kinds of risk (operational, technological,
financial, legal, reputational or tax-related) that affect the Company and/or Group have occurred
during the year,
NO
38