Main principles

In the context of the Grand Paris Express, the

deployment of an internal control and compliance

system at the programme management level is

necessary to limit its exposure to the operational and

organisational vulnerabilities inherent in the scope

and scale of the activities and flows handled.

This deployment fully takes into account the two

dimensions that make up the very concept of internal

control:

– First of all, it involves putting in place all the

measures aimed at controlling the internal

operations of Société du Grand Paris. Internal

control is therefore understood here primarily as a

tool for preventing non-conformities and controlling

the risks associated with key programme

management processes: awarding and performing

contracts, management control, paying suppliers,

HR and cyber security, internal monitoring

processes;

– At the same time, it involves checking, through

controls, the consistency, accuracy, quality

and proper functioning of the activities of

the programme manager and its ecosystem

(almost 5,000 suppliers and third parties).

To support its approach, Société du Grand Paris has

adopted the definition given by the Autorité des

Marchés Financiers (AMF), focusing its efforts

on actions to ensure that:

– laws and regulations are complied with;

– the instructions and guidelines set by its

Management Board are applied;

– the company’s internal processes function properly,

particularly those contributing to the safeguarding

of its assets;

– its financial information is reliable.

Deployment strategy

The internal control/compliance approach was

introduced in early 2019. Its deployment is

deliberately prioritised in such a way as to secure

processes with an insufficient level of control and to

facilitate the adoption of the approach by all divisions.

The scope of the system meets regulatory

expectations linked to Société du Grand Paris’s

status as a public institution (application of public

procurement rules, public budgetary and accounting

management, etc.) and operational expectations,

given the technical requirements associated with

the construction of the Grand Paris Express.

It concerns both the support functions (finance,

public procurement, human resources, information

systems, etc.) and the business departments

responsible for managing the construction of

the structures. The internal control/compliance

deployment strategy was based firstly on an

assessment of the maturity of the approach within

the institution.

SECURING PROCESSES

THROUGH THE DEPLOYMENT

OF INTERNAL CONTROL

AND COMPLIANCE

IDENTITY

RISKS AND CHALLENGES

Risks

CSR APPROACH

2020 ACTIVITY