Responsibility statement under the Code

The Code requires the Board of Management to provide a description of PostNL’s main risks in relation to its risk appetite. Such risks may include strategic, operational, compliance, financial and reporting risks. These risks and the relation to PostNL’s risk appetite are included in the chapter 'Risk and opportunity management’. The Board of Management confirms that it is responsible for PostNL’s risk management, internal control, integrity, and compliance systems and has reviewed the design and the operational effectiveness of these systems for the year ended 31 December 2023.

The outcome of these reviews and the analysis has been shared with the Audit Committee and the Supervisory Board and has been discussed with PostNL’s external auditor.

The same would apply in respect of material failings in PostNL’s risk management, internal control, integrity and compliance systems and of material changes or improvement implemented in such systems, each if applicable. PostNL continued to implement significant organisational and compliance management changes and improvements. In 2023, we focused on improving due diligence on delivery partners and our privacy framework.

No material failings in PostNL’s risk management internal control, integrity and compliance systems were reported, other than those described in the chapters ‘Risk and opportunity management’ and ‘Corporate Governance’ and provided for external conditions that can reasonably be expected to have an impact on a company’s results. The results of PostNL are generally not sensitive to material changes in external conditions.

Based on the outcome of the PostNL-specific approach to risk management, internal control, integrity and compliance systems as outlined in the chapters ‘Risk and opportunity management’ and ‘Corporate Governance’, the Board of Management believes, to the best of its knowledge, that PostNL’s internal control over financial reporting worked effectively over the year ended 31 December 2023 and provides reasonable assurance that the financial reporting is free from material inaccuracies or misstatements.

Additionally, the Board of Management is of the view that considering the annually updated strategic plan and forecasts, in the current situation, it is justified that PostNL’s financial reporting has been prepared on a going concern basis and that it states those material risks and uncertainties that are relevant for the expectation of PostNL’s continuity for the period of twelve months after the preparation of the report. The above, however, does not imply that PostNL can provide certainty as to the realisation of strategic business and financial objectives. Nor can PostNL’s approach to internal control over financial reporting be expected to prevent or detect all misstatements, errors, fraud or violation of laws or regulations.

In view of the above and based on the outline of the main risks and risk responses described in the chapter 'Risk and opportunity management’, the Board of Management believes it complies with provisions 1.4.2 and 1.4.3 of the Code.