Investor Presentaiton

Novo Nordisk Annual Report 2023 Introducing Novo Nordisk Strategic Aspirations Risks Management Consolidated statements Additional information. 98 Independent Auditor's Assurance Report on the ESG statement To stakeholders of Novo Nordisk A/S Novo Nordisk A/S engaged us to provide limited assurance on the consolidated ESG statement ('the ESG statement') for the period 1 January - 31 December 2023, presented on pages 86 to 94 in the Annual Report 2023 of Novo Nordisk A/S. Management's responsibility Management of Novo Nordisk A/S is responsible for designing, implementing and maintaining internal controls over information relevant to the preparation of the ESG data and information in the ESG statement, ensuring it is free from material misstatement, whether due to fraud or error. Furthermore, Management is responsible for establishing objective accounting policies for the preparation of the ESG statement, for the overall content of the ESG statement, and for measuring and reporting ESG data in accordance with the Basis of preparation and the ESG accounting policies. Auditor's responsibility Our responsibility is to express a limited assurance conclusion based on our engagement with Management and in accordance with the agreed scope of work. We have conducted our work in accordance with ISAE 3000 (Revised) Assurance Engagements Other than Audits or Reviews of Historical Financial Information and ISAE 3410 Assurance Engagements on Greenhouse Gas Statements, and additional requirements under Danish audit regulation, to obtain limited assurance about our conclusion. Greenhouse Gas emissions quantification is subject to inherent uncertainty because of incomplete scientific knowledge used to determine emission factors and the values needed to combine emissions of different gasses. We are responsible for: ⚫ planning and performing the engagement to obtain limited assurance about whether the ESG statement is free from material misstatement, whether due to fraud or error, and prepared, in all material respects, in accordance with the Basis for preparation and the ESG accounting policies; ⚫ forming an independent conclusion, based on the procedures we performed and the evidence we obtained; and ⚫ reporting our conclusion to the stakeholders of Novo Nordisk A/S. Deloitte Statsautoriseret Revisionspartnerselskab applies International Standard on Quality Management 1 (ISQM 1), which requires the firm to design, implement and operate a system of quality management including policies or procedures regarding compliance with ethical requirements, professional standards and applicable legal and regulatory requirements. We have complied with the requirements for independence and other ethical requirements of the International Ethics Standards Board for Accountants' International Code of Ethics for Professional Accountants (IESBA Code), which is founded on fundamental principles of integrity, objectivity, professional competence and due care, confidentiality and professional behaviour and ethical requirements applicable in Denmark. A limited assurance engagement is substantially less in scope than a reasonable assurance engagement. Consequently, the level of assurance obtained in a limited assurance engagement is substantially lower than the assurance that would have been obtained had we performed a reasonable assurance engagement. Work performed We are required to plan and perform our work in order to consider the risk of material. misstatement in the ESG statement. To do so, we have: ⚫ conducted interviews with data owners and internal stakeholders to understand the key processes and control activities for measuring, recording and reporting the ESG data; performed limited substantive testing on a selective basis to check that data has been appropriately measured, recorded, collated and reported; • performed analysis of data, selected based on risk and materiality; made inquiries regarding significant developments in the reported data; ⚫ considered the presentation and disclosure of the ESG statement; assessed that the process for reporting greenhouse gas emissions data follows the principles of relevance, completeness, consistency, transparency and accuracy outlined in The Greenhouse Gas Protocol Corporate Standard Revised edition (2015) and The Corporate Value Chain (Scope 3) Accounting and Reporting Standard (2011); and • evaluated the evidence obtained. Our conclusion Based on the procedures performed and the evidence obtained, nothing has come to our attention that causes us not to believe that the ESG data on pages 86 to 94 in the consolidated ESG statement for the period 1 January - 31 December 2023, have been prepared, in all material respects, in accordance with the Basis of preparation and the ESG accounting policies. Copenhagen, 31 January 2024 Deloitte Statsautoriseret Revisionspartnerselskab Business Registration No. 33 96 35 56 Anders Vad Dons State-Authorised Public Accountant mne25299 Mads Stærdahl Rosenfeldt ESG Partner

View entire presentation