Main principles
In the context of the Grand Paris Express, the
deployment of an internal control and compliance
system at the programme management level is
necessary to limit its exposure to the operational and
organisational vulnerabilities inherent in the scope
and scale of the activities and flows handled.
This deployment fully takes into account the two
dimensions that make up the very concept of internal
control:
First of all, it involves putting in place all the
measures aimed at controlling the internal
operations of Société du Grand Paris. Internal
control is therefore understood here primarily as a
tool for preventing non-conformities and controlling
the risks associated with key programme
management processes: awarding and performing
contracts, management control, paying suppliers,
HR and cyber security, internal monitoring
processes;
At the same time, it involves checking, through
controls, the consistency, accuracy, quality
and proper functioning of the activities of
the programme manager and its ecosystem
(almost 5,000 suppliers and third parties).
To support its approach, Société du Grand Paris has
adopted the definition given by the Autorité des
Marchés Financiers (AMF), focusing its efforts
on actions to ensure that:
laws and regulations are complied with;
the instructions and guidelines set by its
Management Board are applied;
the company s internal processes function properly,
particularly those contributing to the safeguarding
of its assets;
its financial information is reliable.
Deployment strategy
The internal control/compliance approach was
introduced in early 2019. Its deployment is
deliberately prioritised in such a way as to secure
processes with an insufficient level of control and to
facilitate the adoption of the approach by all divisions.
The scope of the system meets regulatory
expectations linked to Société du Grand Paris s
status as a public institution (application of public
procurement rules, public budgetary and accounting
management, etc.) and operational expectations,
given the technical requirements associated with
the construction of the Grand Paris Express.
It concerns both the support functions (finance,
public procurement, human resources, information
systems, etc.) and the business departments
responsible for managing the construction of
the structures. The internal control/compliance
deployment strategy was based firstly on an
assessment of the maturity of the approach within
the institution.
SECURING PROCESSES
THROUGH THE DEPLOYMENT
OF INTERNAL CONTROL
AND COMPLIANCE
IDENTITY
RISKS AND CHALLENGES
Risks
CSR APPROACH
2020 ACTIVITY