Experian ESG Presentation Deck

Executive Summary Environment - TCFD reporting (part 2) Improving Financial Health 59 We are committed to identifying, assessing and managing risks and opportunities presented by climate change both now and in the future. Step 1 Risk identification Climate-related risks are identified and prioritised using our established Global Risk Management governance structure (outlined on page 85 of the FY22 Annual Report). This well-established process for identifying, assessing, responding to and reporting business risks (see below) is completed at least twice a year to ensure that it remains appropriate and that any new activities or changes to variables have been captured. The framework combines a bottom-up approach - engaging with local subject matter experts who have in-depth knowledge of business activity (First and Second Lines of Defence) - with a top-down global strategic review of risks (Third Line of Defence). > Consider key business objectives Data Identify principal risks > Identify key controls Employees O Experian Public Risk management Supply Chain Step 2 Risk assessment > Assess controls > Estimate likelihood, impact and velocity Environment Consider legal, reputation and conduct exposure Step 3 Risk response Governance > Accept or remediate current risk and control environment Policies & Data tables Because of their nature, climate-related risks can be presented to the organisation in different ways (for example: through policy and regulation, product adaptation, operational disruption, market volatility and other external factors), and therefore to ensure a thorough analysis and identification we ran a series of focus groups with internal stakeholders from areas where key climate-related risks could arise; this supported the process of identification of any specific risks to, and opportunities for, our business. The resulting climate specific risks and opportunities register was used to perform a scenario analysis (please see pages 65-67) to assess their likelihood and impact to our business. > Determine corrective action if needed Key risks that are identified as a result of this process are maintained in the Global Risk Inventory, reviewed by the ERMC, approved by the Audit Committee and presented to the Board. At present, climate change is classified as an emerging risk. Appendix Bexperian. Step 4 Risk reporting & monitoring Business unit and regional level > RRMCs and ERMC > Audit Committee

View entire presentation