Company: SNY
Filing Date: 2025-02-13
Form Type: 20-F
Source: 0001121404-25-000010
Chunk: 312

Company: Sanofi
Filing Date: 2025-02-13
Form: 20-F
Chunk 312
---
 through the cybersecurity operation center. He develops appropriate plans to mitigate such risks. Such plans are validated by the Chief Digital Officer and shared with the Executive Committee. The Chief Information Security Officer belongs to the digital division and directly reports to the Chief Digital Officer, a member of the Executive Committee. In addition, the Chief Information Security Officer is a permanent member of the group Risk Committee and reports on the cybersecurity risk to such group Risk Committee, to the Audit Committee and to the Executive Committee regularly. The reporting covers various matters, such as the outcomes of audits on Sanofi’s information systems, the main incidents encountered over the preceding period, Sanofi’s digital transformation or the cybersecurity strategy and framework for the coming years. The group Risk Committee , comprised of the managers of Sanofi’s Global Business Units, consolidates the risks identified by the specific committees and targets the high priority risks Sanofi is facing. The group Risk Committee then allocates each risk to the relevant Executive Committee member (i.e. the cybersecurity risk is allocated to the Chief Digital Officer as the relevant member of the Executive Committee, who manages the mitigation of such risk with the Chief Information Security Officer) and reports regularly to the Audit Committee. Following this identification and allocation process, the group Risk Committee reports on a quarterly basis to the Executive Committee on the progress of the mitigation plans. The Audit Committee controls that the cybersecurity risks are well managed and reports on such management to the Board of Directors. The Board of Directors is also informed of such risks, as well as other cybersecurity matters, through periodic reports from the Chief Digital Officer, the Head of the group Risk Committee, or the Chief Information Security Officer.

| SANOFIFORM 20-F2024 | 185 |

| PART III                      |
| ITEM 17. Financial Statements |

Part III Item 17. Financial Statements See Item 18. Item 18. Financial Statements See pages F-1 through F-103 incorporated herein by reference. Item 19. Exhibits

| 1.1.    
 1.2.    | Articles of association (statuts) of Sanofi (English translation).                                                                                                                                                                                                                                                                                                                                                                               
 Board Charter (Règlement Intérieur) of Sanofi (English translation) (Incorporated by reference to Exhibit 1.2 of the Company’s Annual Report onForm 20-F for the year ended December 31, 2023)                                                                                                                                                                                                                                                   |
|:--------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| 2.1.    | The total amount of