Information on the accounting-related internal control system in accordance with section 289 (4) HGB and section 315 (4) HGB

The accounting-related internal control system of the Fraport Group monitors compliance with the generally accepted accounting principles and legal requirements. It is based on the framework of the Committee of the Sponsoring Organizations of the Treadway Commission (COSO).

In terms of the accounting process of Fraport AG, the company regards the internal control and risk management system as a process that is embedded in the company-wide internal control and risk management system. Fraport AG prepares its own separate financial statements in accordance with German commercial and stock market regulations.

The process of preparing the financial statements of Fraport AG is laid down in a schedule detailing each individual step, including deadlines and responsibilities. Group Accounting monitors the progress and is schedule assisted by a system. In order to ensure standardized procedures, important operational processes of the sub-ledgers (accounts payable, accounts receivable, asset accounting, treasury, accounting of the decentralized departments) and general ledger have been documented in policies, process descriptions, manuals, and guidelines.

Fraport AG uses the SAP ECC 6.0 system for its accounting. Accounting-related internal controls are carried out, where possible, in the SAP ECC 6.0 system. Manual application and monitoring controls are carried out during the operational accounting processes in the sub-ledgers. A dual control method is implemented when preparing the financial statements of the general ledger, and subsequent mainly manual monitoring controls are carried out additionally for the purpose of ensuring the completeness and accuracy of items recognized in the sub-ledgers. The tax department calculates and posts taxes on income, and performs manual application and monitoring controls.

Segregation of duties are implemented in the departments involved in the accounting process on a system, personnel, and organizational level. An SAP authorization concept for Fraport AG is used for issuing and administering access authorization for accounting-related systems.

Group accounting at Fraport is basically organized on a decentralized basis. Reconciliation of the local individual financial statements (commercial balance sheet I) of the parent company and subsidiaries, joint ventures, and associated companies to the individual financial statements (commercial balance sheet II) prepared in accordance with uniform Group accounting policies is carried out decentrally by the companies. To ensure uniform Group accounting and measurement Fraport has developed an IFRS Group accounting guideline on the basis of which the companies included in the consolidated financial statements reconcile commercial balance sheet I to commercial balance sheet II. The effectiveness and accuracy of the Group accounting process is confirmed by the companies included in the consolidated financial statements in the context of an internal Group declaration of completeness.

Wherever possible, accounting-related internal controls are carried out in SAP BPC. Access authorizations at the level of the consolidated companies are assigned and managed centrally at Fraport AG on the basis of a user authorization concept. Manual application and monitoring controls, particularly with regard to the completeness and quality of the reporting data, are carried out as part of the operational accounting processes in Group accounting. The effectiveness of the internal control system is reviewed annually by performing a control self-assessment.

The consolidated financial statements are prepared by the Group Accounting department of Fraport AG. The Group financial statement process is described in detail in a flow chart which contains the individual process steps with dates and responsibilities. The progress of the process as well as reporting deadlines and the completeness of the Group reporting system are monitored by the Group Accounting department.

The notes to the consolidated financial statements are prepared as part of the consolidated financial statement process by the Group Accounting department. Where necessary, the information in the notes to the consolidated financial statements is subsequently checked by central or decentralized specialist departments after the notes to the consolidated financial statements have been prepared.

The Corporate Finance and Investor Relations department is generally responsible for preparing the combined management report. This department consolidates the information provided by the specialist departments. Subsequent control of the consolidated information is performed by the specialist departments.

Key sub-processes of the accounting process for the Group and Fraport AG, as well as the performed internal controls, are subject to scheduled audit by the Internal Audit department.