Company: MT
Filing Date: 2025-03-10
Form Type: 20-F
Source: 0001243429-25-000017
Chunk: 48

Company: ArcelorMittal
Filing Date: 2025-03-10
Form: 20-F
Chunk 48
---
 of the risk-management framework and process. The Global Assurance Department facilitates the risk management process and provides support enabling business as well as corporate functions to identify these risks and opportunities to the business based on social, environmental, regulatory, workforce, stakeholder, resource, technological and other trends, and specify mitigation actions. A consolidated report is shared on a half-yearly basis with the key stakeholders. With respect to climate, the work is coordinated by ArcelorMittal’s executive officer for corporate business optimization in consultation with segment CEOs; discussed on a regular basis by the Group Management Committee; and overseen by the Executive Office, which provides leadership and guidance. The Company’s climate strategy financial risks are brought to the attention of the Group Management Committee and where financially significant at a group level, are addressed at the Corporate Finance and Tax Committee . Central to the Company's approach is its work to advocate for policy support strategy to ensure that ArcelorMittal can respond to rising carbon prices with viable investments in decarbonization technologies. At the same time, all of ArcelorMittal's business segments are required to prepare carbon emission reduction plans to reach net zero by 2050 as part of the annual planning cycle. With respect to security, the Company has put in place means to ensure the security of its people, assets and intellectual property by supporting business units on security governance, security risk management, operational security, strategy and continuous improvement. It develops and promotes security policies, procedures, tools and processes to support security process owners with identifying and assessing security risks, related to people, assets and intellectual property. It also identifies gaps, and implements appropriate leading practice security controls to promote more secure and resilient business environments. As regards risks relating to the security of information systems, ArcelorMittal has developed governance and security rules which describe the recommended organization, infrastructure and operating procedures. These provisions are applied across the Company under the responsibility of the business segments. The Group Chief Information Security Office defines cyber security policies available and applicable for all segments/units globally and develops general directives in cyber security reflecting mission, goals and values of ArcelorMittal. The cyber security policy focuses on protecting information systems against disclosure to unauthorized users (confidentiality), improper modification (integrity) and non-access when required (availability). In addition, cyber maturity assessments are performed annually in many business units and supplemented by in-depth cyber audits and penetration testing exercises performed by Global Assurance. For more detailed information

26

| Management report |

regarding the Company's cybersecurity risk management and strategy, see "Cybersecurity