Page 25 - Consolidated Non Financial Statement

Banca Ifis

| 2020 Consolidated Non-Financial Statement
Faced with the regulatory updates applied in 2019, the Bank’s Model has been revised and the relevant changes
submitted to the Parent Company’s Supervisory Body and Board of Directors and respectively approved on 14 and 15
October 2020. The review meets the Bank's need for protection, first and foremost through information of the users,
namely the Bank’s employees, managers and collaborators called to ensure that their actions are compliant with the
Model and, secondarily, of its potential readers, namely the Investigators called to assess its effectiveness and
adequacy.

Monitoring the functioning of, and compliance with, the Organisational Models is the responsibility of the Parent's
Supervisory Body and the Supervisory Bodies of the subsidiaries, if any, which have their own independent powers of
initiative and control. Banca Ifis's Head of Internal Audit is a member of all Supervisory Bodies and currently plays a
crucial role in coordinating, integrating and maintaining the information flows required from the Supervisory Bodies of
the Group's companies.

The supply chain
[GRI 102-9]
The Banca Ifis Group regulates relations with the supply chain through internal procedures and policies like the Group
Expenditure Cycle Management Policy and the Corporate Goods and Services Procurement Management
Organisational Procedure, respectively updated in 2018 and 2019.

In 2020, the Group used 4.946 suppliers, mainly based in Italy, of which the main categories related to professional
and non-professional services: in particular consultancy or legal services, outsourcing, customer information services
and services related to software use or assistance.

[GRI 403-7]
In managing its relations with suppliers, in order to minimise any negative impacts on health and safety deriving from
11
the interaction of its business with that of external suppliers , the Banca Ifis Group implements various measures
depending on the work/service agreed. More specifically, and if held to be necessary, the Group:

• as prescribed by Italian Legislative Decree no. 81/08, defines the best ways by which to manage interferences
and drafts specific documents such as the Safety and Coordination Plan (PSC) and the Consolidated
Document for the Assessment of Risks of Interference (DUVRI);
• demands that suppliers incorporate the Bank's Safety Policy, declaring that they will adopt and respect it;
• demands that suppliers produce any qualifications necessary to go about their business, self-certifying
requirements of professional suitability and sending the client the Consolidated Document Attesting to
Compliance with the Payment of Social Security and Welfare Contributions (DURC);
• takes additional protection measures, the costs of which are specified in the individual contracts (Safety Costs).

11 This methodology is adopted for all interventions requiring the use of contractors, self-employed workers, services and supplies

17