CULTURE & VALUES

There has been a strong emphasis from the board, the CEO and the group executive committee on the importance
of the company’s values underpinning everything we do. Progress has been made in this area, but reinforcing the core values across a diverse and globally spread workforce
takes considerable effort.

G4S provides security to people, premises and valuable assets. In its care & justice services businesses it also provides services which interact with detainees, victims of crime, those on state assistance, vulnerable people and other members of the public. This requires our staff to conduct themselves with the utmost integrity. We operate in 120 countries around the world with a diversity of local and national cultures. These factors mean that having a strong set of corporate values that unite the organisation, deeply embedded in our culture, is of particular importance.

If we fail to behave in accordance with the high standards that we set ourselves there is a risk that
we will not deliver on our commitment to customers, and fail to comply with legislation and international standards. We may also compromise the safety and security of our employees and the assets or people that we are protecting.

This can lead to penalties, failure to renew contracts and ultimately reduced profitability and damage to our global brand and reputation.

We have in place high ethical standards and policies which we expect our staff to observe globally and these are reinforced through awareness and training programmes and monitored through audit, whistle-blowing and trading reviews.

Senior managers’ performance contracts and bonuses are in part based upon adherence to our values. During 2013, our new CEO and the executive
team has reiterated the importance of our values
in delivering customer service and sustainable shareholder value. During 2014 we will be examining our HR processes to ensure that they fully support our values; we are refreshing our whistle-blowing policy; and we will continue to reinforce the group values at every opportunity. Compliance with the values is assessed through performance reviews, trading reviews, business self-assessments and audit.

–   Movement since 2012

–   Risk description

–   Mitigation

HEALTH & SAFETY

There has been a heightened focus by the board, the CEO and the group executive committee on the importance of health
and safety.

The provision of security services, often in hostile or dangerous circumstances across such a broad diversity of countries, presents particular health and safety challenges. The protection of our staff, people in our care and third parties, including the public, is of utmost importance.

The principal health and safety risks are work-related attacks and road traffic accidents. In 2013, 55 (2012: 59) employees lost their lives. We are committed to strengthening our health and safety systems, processes and cultures.

Fatalities and serious injuries to our staff impact not only the individuals concerned, but also their families, loved ones and other dependents.

We have clear standards and policies for health and safety and we monitor key performance indicators from each business, and conduct safety reviews for any business where there have been work-related fatalities.

We also have an incident alert and investigation procedure in place for serious injury or loss of life
and a lessons-learned process to correct any deviations from standards.

In 2014 we are introducing a new value called Safety First to ensure that we are investing in health and safety and are considering safety issues in everything we do in our businesses around the world.

Our specific plans for 2014 include rolling out
the G4S Driving Force Rules across the group, developing on-line health and safety for all senior managers, and continuing our programme of
detailed reviews in countries where there have
been work-related fatalities to ensure we implement all the recommendations from investigations to prevent recurrence.

PEOPLE

G4S’ human resource processes are well established and effective. Nevertheless, there will always be challenges in attracting and retaining employees.

We are a people business and we take great care
to ensure that we employ the best people to deliver quality services to our customers. As the largest employer listed on the London Stock Exchange, employing 618,000 people worldwide, and the largest security solutions provider in the world, our customers choose G4S because of the level of screening, training, integrity and trustworthiness.

In a global and diverse business such as ours, there
are risks associated with recruiting, robust screening, motivating, developing and training, as well as appropriately rewarding and retaining our
critical talent.

Failure to recruit and retain key managers and staff and to motivate and develop them can impact
service delivery, customer retention and business
management, which in turn can adversely affect our financial performance.

We use rigorous recruitment, selection, screening
and induction processes and standards to ensure that we employ the best people, with the right values,
for the requisite roles. Standards are set by group human resources and measured and enforced through a combination of regular staff surveys, country self-assessments, monitoring of regional and country specific KPIs and independent audits: all driving constant improvements in processes.

Attracting and developing the right talent is the key
to our success and we have a process for identifying high potential employees and putting in place career development plans to promote them into more senior positions. We engage our employees through our PRIDE model:

–   Movement since 2012

–   Risk description

–   Mitigation

Brand/Reputation

The nature of the services we provide means that we are often in the public eye. However, the issues which have arisen around a number of our high profile contracts over the last two years have undermined the company’s brand and reputation, particularly as a trustworthy strategic supplier to the UK Government.

The company’s brand is well known and associated with high quality security services around the world. However, recent events in the UK had an adverse impact on our reputation, in particular with the UK Government. Furthermore, as detailed in the chief executive’s review, our performance under certain
UK electronic monitoring contracts was referred
to the Serious Fraud Office (SFO).

There is a risk that until our reputation is sufficiently repaired and the SFO investigation concluded, our sales pipeline could be impacted. The first key step to repairing our reputation is rebuilding the confidence
of the UK Government in G4S as a strategic supplier. There is a risk that the changes we are implementing to this end take time to be accepted as sufficient by the UK Government.

We have an on-going programme of corporate renewal. This is supported by the broader changes being made across the group to leadership, governance and contract management and assurance; as well as by the heightened focus on corporate values and ethics. In order to ensure timely progress this programme is being monitored directly by the group executive and the board and being independently reviewed by a firm of accountants on behalf of the
UK Government.

At individual region and country level there is a
strong focus on delivering excellent customer service in order to protect and enhance our local brand
and reputation.

We are investing in the strengthening of our risk management, audit and customer service capacity.

Major Contracts

The company’s strategy is to provide integrated security solutions to customers, which often results in taking on more complex contracts. The company is implementing improvements to bid assessment, programme management and assurance
and new contract management processes. These will take time to bed in.

The group has a number of long-term, complex, high value contracts with multi-national, government or other strategic customers. The company’s growth strategy includes a greater focus on higher value,
and more technology-rich services. This will increase the complexity and individuality of customer requirements and contracts.

For such contracts there are risks to the group accepting onerous contractual terms; mobilising contracts well; transitioning effectively from mobilisation to on-going contract management; delivering to contractual requirements; managing complex billing arrangements; managing contract change control; and managing sub-contractors.

Failure to ensure effective contract take-on, mobilise successfully and manage complex contracts
effectively throughout their lifecycles can impact customer satisfaction, reputation, revenue, cash flow, and profitability.

The company has tightened the criteria and level of scrutiny for regional and group level legal review of complex contracts during the bid cycle.

The group has implemented a standardised
approach to project management for complex mobilisations in the UK, which will be rolled out globally during 2014. External project management resource is utilised in cases when insufficient internal capability is in place. The group is also strengthening
its processes for bid assessment, contract take-on
and on-going contract assurance.

–   Movement since 2012

–   Risk description

–   Mitigation

delivery of core Service lines

Our commitment to delivering sustainable growth and shareholder value is founded
on delivering on our customer commitments. There is a continuous focus on this at the group executive. In addition, through the investments in the service excellence centres
and within the regions and countries, we continued to make improvements in the processes and systems in many of our
core businesses over the course of 2013.

We deliver our core secure solutions services in
100 markets and our core secure cash transportation services in 61 markets. A number of these businesses have been acquired over time, resulting in cultural differences, varying degrees of operational maturity and a multiplicity of information systems.

This can create risks around core operational service delivery and supporting functions. Failure to meet
the service delivery requirements of our customers, because we have not implemented the right solutions or followed appropriate agreed procedures, can
create risks around cash losses; attacks on our staff, subcontractors or third parties; and the non-delivery of the service level agreements and KPIs agreed with our customers.

Additional risks relate to business resilience, control systems, and the availability of critical systems, facilities and people to perform contractually agreed services.

This can lead to financial penalties, and negatively impact customer retention and goodwill, to the detriment of financial performance.

We have developed the G4S Way, which defines best practice processes and standards for all aspects of service delivery with the aim of improving service excellence and margin. The G4S Way is being implemented globally across all our businesses. It sets out requirements for managing contract take-on and mobilisation; completion of risk assessments; management of security assignments at customer
and site levels; and defines service delivery KPIs to measure compliance.

Minimum guidelines have been set for key areas such as control room management; security officer communications; fleet routing and scheduling; resource planning and staff rostering; and escalation procedures for duress/attack/
absence situations.

Recent developments in our secure solutions business include deployment of our core operating system, Saturn, to efficiently match our security officer deployment to customer requirements. In our cash solutions business we have put in place a dedicated risk management team to ensure robust risk analysis and rectification of deviations from our minimum standards. Our countries are required to have business continuity and crisis management plans in place and to test them regularly.

We are also making on-going improvements to
the efficiency and effectiveness of supporting and control systems.

Laws & Regulations

The products and services we provide are subject to the ever-changing legal landscape across the many jurisdictions in which we operate, requiring constant monitoring and
change to ensure compliance.

G4S operates in many jurisdictions globally, within complex and diverse regulatory frameworks.

An additional complexity arises from the extra-territorial reach of some of the legislation to which
the company is subject.

Risks include increasing litigation and class actions especially in the United States; bribery and corruption; obtaining operating licences; complying with local tax regulations; changes to employment legislation; complying with human rights legislation; and new or changed restrictions on foreign ownership. Risk also arises from new or changing regulations which require modification of our processes and staff training.

The necessary changes to ensure continued compliance with applicable laws and regulations, or
not being compliant, have far reaching consequences, including higher costs from claims and litigation; inability to operate in certain jurisdictions, either through direct ownership or joint ventures; loss of management control; damage to our reputation; and loss of customer confidence.

Each country in the group puts in place rigorous compliance policies, standards and controls, including training, to assure adherence to local laws, regulations and licence requirements. We review existing policies in light of changes to legislation and recent case law.

The group has good procedures in place to ensure that our businesses are complying with anti-bribery
& corruption legislation, including self-assessments; a training and awareness programme for staff in sensitive positions; an independent audit of the effectiveness of our procedures; and confidential reporting hotlines.

We build positive constructive relationships with governments and related agencies by engaging in
the legislative process directly and through local trade associations. Our aim is to support governments to craft legislation that achieves its aims in relation to our industry in as efficient and effective a way as possible.

–   Movement since 2012

–   Risk description

–   Mitigation

Growth Strategy

The group has placed a greater emphasis on higher value solution development and sales, underpinned by technology. It will take time to mobilise and build the right capabilities to deliver this strategy.

Our growth strategy is to leverage our expertise
to expand our core service lines into more complex, outsourcing areas which increase long-term customer partnerships; to focus on organic growth opportunities with less reliance on acquisitions; and to leverage
our expertise in security systems technology across key markets.

There are risks that we will fail to optimise our product mix; fail to build the sales and solutions capability we need; fail to leverage our existing expertise and resources into the areas where we
can best achieve organic growth targets; or that
we will under-invest or invest in the wrong areas.

Failing to create higher value solutions that differentiate us from local competitors could impact targeted growth in revenues and margins.

We are investing in sales and business development resources to support growth and to strengthen our solution selling capability.

We have established a single capital pool for all key investments and have revised our investment approval processes to approve only those capital requests
that demonstrate an appropriate balance of risk and return. This is designed to ensure we make the right investments to support the strategy. A revised major bid assessment process has been implemented which will ensure that the key opportunities which underpin our growth strategy are properly positioned, resourced and managed.

Rigorous trading and performance reviews for each business unit enable us to monitor progress against our strategic goals on a periodic basis. Our on-going capability review process will ensure we build the right skills needed to underpin the delivery of the strategy.

Geo-Political

Given the wide range of countries in which the group operates there will always be some with a degree of serious political instability. We take
great care with our operations
in these countries to monitor the situation closely and
respond appropriately.

We operate in 120 countries across the developed and developing world, with wide-ranging government and political systems, differing cultural landscapes, and varying degrees of rule of law; and within conflict and post-conflict zones.

The risk factors range from political volatility, revolution, terrorism, military intervention and insurgency.

The geo-political risks we face impact us in many
ways: the health and safety of our staff and customers; the continued operation of our businesses; and the ability to secure our assets and recover our profits.

We have a great deal of experience of operating in
a wide range of difficult territories. We collaborate with our local partners and/or agents; conduct
early risk assessments before and during security assignments; have robust operating procedures; and work closely with our local and global customers in managing the risks of operating in such environments. We have a global process for assessing the geo-political risks of different countries which determines the types of customers we will serve and the types
of services we will provide.

–   Movement since 2012

–   Risk description

–   Mitigation

Information Security

The sophistication of cyber hackers increases continuously and the heightened high profile reputation of the group in the UK in particular make us a potential target.

G4S has an obligation to safeguard the information that our customers, partners and employees entrust to our care.

Given G4S' high profile, we are at risk of cyber and physical attack by criminal organisations and individual hackers. Whilst we do have strong protection in place, the threat is increasing. If an attempt is successful, our information systems could be compromised or our information disclosed.

A successful attack could result in: censure and fines
by national governments; loss of confidence in the G4S brand and reputation; specific loss of trust by clients, especially those in government and financial sectors; disruption to service delivery and integrity, particularly in cash solutions operations.

G4S has cyber security controls in place to protect information.

In 2013, we appointed a group head of information security who has developed a strategy to improve our information security maturity. This will roll out good practices across all regions and businesses to reduce the likelihood of a successful attack and to increase
the ability of G4S to detect and respond to attacks.

Cash Losses

Through the work of the service excellence centres working with the regions, improvements have been made to processes and systems in many of our cash solutions businesses over the course of 2013.

We have cash solutions businesses spread across
the world responsible for cash held on behalf of our customers. We provide cash transportation from one site to another in high security vehicles, a range of
cash management services including secure storage, counting, reconciliation and sorting of notes for
ATMs, a range of ATM services and secure international transportation of cash and valuables.

There are inherent risks in this business related
to external attacks, internal theft and poor
cash reconciliation.

Cash losses can have a major impact for our customers and ourselves in respect of loss of profit, increased cost of insurance and health and safety considerations for our staff and the public.

Our cash solutions service excellence centre (SEC) works in collaboration with the regions to embed robust procedures into every cash business to mitigate cash losses. Innovative security defence products are
in use, ranging from pavement box tracking to vehicle protection foam and protective pavement boxes.

All cash transactions are subject to strict authorisation limits and we have very tightly controlled cash reconciliation procedures to ensure cash is fully accounted for and controlled and these procedures are subject to constant monitoring and audits. We also have a robust process to monitor all cash-related incidents through a team of security specialists and
we ensure that lessons learned are shared through
the SEC.