BusinessResiliency
Program
Overview
Living Integrity.
Living Chemistry.
This document covers our general philosophy
and is based on best practices. It is not intended
to cover every situation or set of circumstances
and is not intended for use by others.

Introduction

Chemours is committed to providing
support, products, and services to ouremployees, communities, customers,
business partners, and stakeholders
after a disaster event. Our approach
to meeting this commitment includes:
Mitigating threats
Mitigation is a core component ofour preparation. On an on-goingbasis, Chemours identifies andevaluates risks to our operations
and takes steps to help reduce
the likelihood of exposure and theimpact should risks materialize.

Building resilience into
day-to-day operations
Resilience is designed into our“normal” operations. Examples
include cross-training personnel,safety and maintenance programs,production and supply chain
strategies, and establishing
redundancy for critical equipment
and technology infrastructure.

Maintaining response andrecovery plans
Chemours has developed plansto guide immediate response andrecovery activities after a disasterevent. A variety of scenarios andtypes of tests and exercises areused to train our personnel. Lessons
learned from these exercises areused to improve our response andrecovery strategies and plans.

Business Resiliency Program Overview

2Overview

Chemours’ Business Resiliency
Program involves employees at all levelsof the company to develop, implement,align, maintain, and continuously
improve our state of readiness.

Key Roles:
Executive Sponsor: Each pillar has an accountable Corporate Officer
Corporate Resilience Senior Manager: Business Continuity Management
advocate and program manager
Business Unit Leadership: Strategic guidance, oversight, resources, issue
resolution
Component Program Owners: Tools, templates, methodology, awareness,
supportSite/Organization Leadership and Teams: On-going readiness (e.g., planmaintenance, training, awareness, exercising, auditing)
Employees: Awareness, personal preparedness
Business Resiliency Program Overview

3Responseand
Recovery
Plans

Specific plans and strategies havebeen developed to address risks andopportunities within an establishedmanagement system to support acoordinated response and recovery
to a wide variety of threats.
CrisisManagementIntegration

Emergency
Response

Integration

CorporateResilienceIntegration

BusinessContinuity

Integration

IT DisasterRecovery

These strategies and plans include:• Immediate response to life and safety incidents• Overall response and recovery guidance, direction, and oversight• Communications with internal and external stakeholders• Recovery of critical processes and resources (i.e., people, technology,physical assets, and relationships)• Recovery of critical information technology infrastructure, applications,and data

Business Resiliency Program Overview

4

Business
Continuity
Planning

Business continuity planning is a corecomponent of Chemours’ BusinessResiliency Program. The businesscontinuity planning process takes into
consideration and aligns with leading
practices as well as industry andregulatory standards.
GovernanceTraining, Exercising& Maintenance

Plan Development

Risk Identification& Impact Analysis

ContinuityStrategies

The process includes:• Establish an overall management system to implement, operate, monitor,review, and maintain the program• Complete business impact analyses to establish recovery objective
requirements for processes and resources• Determine the order of recovery for business functions and technology
and understand current capabilities• Identify and implement business continuity mitigation and recovery
strategies• Audit, review and maintain business continuity plans• Perform regular training and exercises per program policy• Follow the continuous improvement cycle and adjust as needed
Business Resiliency Program Overview

5BusinessContinuity
Plan Content

Business Continuity Plans (BCPs) are inplace for critical operations, which include:• “All-Hazard” planning guides for prevention, response and recovery that
address a full range of threats and hazards (natural, human-caused ortechnology caused) to aid in immediate response and recovery activities toour processes and/or resources• Multi-tiered business continuity recovery strategies for critical processes,
resources, information technology infrastructure, applications or data that
may be partially or fully implemented based on the specific scope, scale,and impact of the incident• Quick reference checklists and procedures for each team• Outlined roles, responsibilities, activities, and procedures from incident
occurrence through plan activation, recovery, and deactivation• Reference material, tools, and example forms
Business Resiliency Program Overview

6Frequently
AskedQuestions

Does Chemours have a business continuity program and plans?
Chemours has developed and maintains multiple levels of response andrecovery plans as part of its overall business resiliency program. Thisincludes site emergency response plans, business continuity plans, IT
disaster recovery plans, and crisis communications and management plans.
Do you provide copies of the Business Continuity Plan?
In order to protect our intellectual property, customer confidentiality,
and company personnel information, we do not release our documented
business continuity plans.
Is there an executive level sponsor / owner of the program?
Yes, each pillar of the program has an accountable corporate officer
assigned.
Who has responsibility for managing the business continuity programon an ongoing basis?
The Corporate Resilience Senior Manager manages the overall business
continuity program. Business Unit Leadership provides oversight, strategic
guidance, resources, and issue resolution for the planning process
within their operations. Additionally, site/department-level teams have
responsibility for the maintenance and exercising of their continuity plans.
Does the program adhere to an accepted business continuity standard
or set of guidelines that reflects current best practices? If so, whichones?
The business continuity program incorporates business continuity
standards and guidelines including, but not limited to ISO22301, NFPA
1600, and DRI International Professional Practices.
Are potential risks that may disrupt operations identified?
Yes, site risk evaluations are completed along with business impact
assessments. These evaluations identify and assess a variety of risks
including natural hazards (e.g., flooding, tornado, earthquake), neighborhood
hazards (e.g., airports, neighboring facilities, railroads, machinery
breakdown), and include identification of impacts and risk improvement
observations. Risk (hazard) information from the evaluations andassessments is incorporated into the business continuity impact analysis
and overall business continuity planning process.

Business Resiliency Program Overview

7FrequentlyAskedQuestions(continued)

Is a business impact analysis completed as part of the business
continuity planning process?
Yes, a business impact analysis is completed and includes the identificationof critical business processes and resources (i.e., people, technology,
physical assets, and relationships), disruption tolerances (recovery timeobjectives), potential business impacts, current capabilities, and potentialstrategies. The information is used to support business continuity strategy
and plan development.
Are plans in place to address the unavailability of employees and key
personnel?
Yes, the business continuity planning process considers the loss ofpeople and skill-sets and identifies recovery strategies for these types ofdisruptions.
How often are plans reviewed and updated?
Plans are reviewed on an annual basis or more frequently if there is a trigger
event (e.g., significant change in operations).
How often are Business Continuity Plans tested or exercised?
On an annual basis Chemours develops the scope and type of exercises tobe completed throughout the year.
What type of drills or exercises does Chemours complete?
Chemours completes a variety of exercises based on input and guidancefrom program stakeholders. Past exercises have ranged from tabletop
exercises to emergency response drills involving external response andgovernment agencies. Additionally, lessons learned from actual incidents
are incorporated into our mitigation and planning activities.
Are there processes in place to address and mitigate internal operation
disruptions?
Yes, mitigation is a core component of our preparation. On an on-goingbasis, Chemours identifies and evaluates risks to our operations andtakes steps to help reduce the likelihood of the exposure and the impact
should risks materialize. Additionally, resilience is designed into our“normal” operations. Examples include, but are not limited to, cross-training
personnel, safety and maintenance programs, production and supply
chain strategies, and establishing redundancy for critical equipment andtechnology infrastructure.

Business Resiliency Program Overview

8FrequentlyAskedQuestions(continued)

Do business plans include procedures for notifying customers?
Yes, the business continuity plan includes procedures for providing
notification to internal and external stakeholders, including customer
notifications.
What strategy does Chemours have in place to provide continued
delivery of product in the event of a catastrophic disaster event
impacting one of its sites?
Strategies vary by specific operation and site, but may include maintaining
finished product inventory, completing production using another asset atthe site, and completing operations at another site.
Is there a post-event report outlining the results of the past events
available for review?
In order to protect business confidential information, past event results
and lessons learned are not available for review. Best practices, corrective
actions, and lessons learned from past events are documented in After
Action Reports, which are tracked and incorporated into planning activities.

Business Resiliency Program Overview

9