To the shareholders and the Board of Directors of CentroCredit Bank

Report on the audit of the financial statements

Opinion

We have audited the financial statements of CentroCredit Bank (the “Bank”), which comprise the statement of financial position as at 31 December 2020, and the statement of profit or loss, statement of comprehensive income, statement of changes in equity and statement of cash flows for the year then ended, and notes to the financial statements, including a summary of significant accounting policies.

In our opinion, the accompanying financial statements present fairly, in all material respects, the financial position of the Bank as at 31 December 2020, and its financial performance and its cash flows for the year then ended in accordance with International Financial Reporting Standards (IFRS).

Basis for opinion

We conducted our audit in accordance with International Standards on Auditing (ISA). Our responsibilities under those standards are further described in the Auditor’s responsibilities for the audit of the financial statements section of our report. We are independent of the Bank in accordance with the International Ethics Standards Board for Accountants’ Code of Ethics for Professional Accountants (including international independence standards) (IESBA Code) together with the ethical requirements that are relevant to our audit of the financial statements in the Russian Federation, and we have fulfilled our other ethical responsibilities in accordance with these requirements and the IESBA Code. We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion.

Responsibility of management and the Board of Directors for the financial statements

Management is responsible for the preparation and fair presentation of these financial statements in accordance with IFRS, and for such internal control as management determines is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error.

In preparing the financial statements, management is responsible for assessing the Bank’s ability to continue as a going concern, disclosing, as applicable, matters related to going concern and using the going concern basis of accounting unless management either intends to liquidate the Bank or to cease operations, or has no realistic alternative but to do so.

The Board of Directors is responsible for overseeing the Bank’s financial reporting process.

Auditor’s responsibility for the audit of the financial statements

Our objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor’s report that includes our opinion. Reasonable assurance is a high level of assurance, but is not a guarantee that an audit conducted in accordance with ISA will always detect a material misstatement when it exists. Misstatements can arise from fraud or error and are considered material if, individually or in the aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of these financial statements.

As part of an audit in accordance with ISA, we exercise professional judgment and maintain professional skepticism throughout the audit. We also:
— Identify and assess the risks of material misstatement of the financial statements, whether due to fraud or error, design and perform audit procedures responsive to those risks, and obtain audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control.
—  Obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Bank’s internal control.
—  Evaluate the appropriateness of accounting policies used and the reasonableness of estimates made by management and related disclosures.
— Conclude on the appropriateness of management’s use of the going concern basis of accounting and, based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the Bank’s ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor’s report to the related disclosures in the financial statements or, if such disclosures are inadequate, to modify our opinion. Our conclusions are based on the audit evidence obtained up to the date of our auditor’s report. However, future events or conditions may cause the Bank to cease to continue as a going concern.
— Evaluate the overall presentation, structure and content of the financial statements, including the disclosures, and whether the financial statements represent the underlying transactions and events in a manner that achieves fair presentation.

We communicate with those charged with governance regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant deficiencies in internal control that we identify during our audit.

Report in accordance with the requirements of Article 42 of Federal Law No. 395-1 of the Russian Federation Concerning Banks and Banking Activities dated 2 December 1990

Management of the Bank is responsible for compliance of the Bank with the prudential ratios established by the Central Bank of the Russian Federation (the “Bank of Russia”) and for compliance of the internal control and risk management systems of the Bank with the requirements set forth by the Bank of Russia in relation of such systems.

In accordance with the requirements of Article 42 of Federal Law No. 395-1 of the Russian Federation Concerning Banks and Banking Activities dated 2 December 1990 (hereinafter, the “Federal Law”), during the audit of the Bank’s financial statements for the year ended 31 December 2020, we determined:
1) Whether the Bank complied as at 1 January 2021 with the prudential ratios established by the Bank of Russia;
2) Whether the internal control and risk management systems of the Bank conformed to the requirements set forth by the Bank of Russia for such systems in respect of the following:
— Subordination of risk management function;
— Existence of methodologies approved by the Bank’s respective authorized bodies for detecting and managing risks that are significant to the Bank and for performing stress testing; existence of a reporting system at the Bank pertaining to its significant risks and capital;
— Consistency in applying and assessing the effectiveness of methodologies for managing risks that are significant to the Bank;
— Oversight performed by the Board of Directors and executive management bodies of the Bank in respect of the Bank’s compliance with risk limits and equity (capital) adequacy requirements set forth in the Bank’s internal documents, and effectiveness and consistency of the application of the Bank’s risk management procedures.

This work included procedures selected based on our judgment, such as inquiries, analysis, reading of documents, comparison of the requirements, procedures and methodologies approved by the Bank with the requirements set forth by the Bank of Russia, and the recalculation, comparison and reconciliation of numerical values and other information.

The findings from our work are provided below.

Compliance by the Bank with the prudential ratios established by the Bank of Russia

We found that the values of prudential ratios of the Bank as at 1 January 2021 were within the limits established by the Bank of Russia.

We did not perform any procedures in respect of the accounting data of the Bank, except for those procedures we considered necessary to express our opinion on the fair presentation of the Bank’s financial statements.

Compliance by the internal control and risk management systems of the Bank with the requirements set forth by the Bank of Russia in relation to these systems

— We found that, in accordance with the legal acts and recommendations issued by the Bank of Russia, as at 31 December 2020, the Bank’s internal audit function was subordinated and accountable to the Board of Directors, and the Bank’s risk management function was not subordinated or accountable to the departments that take the relevant risks.
— We found that the Bank’s internal documents effective as at 31 December 2020 that establish the methodologies for detecting and managing credit, market, operational, liquidity and concentration risks, as well as the credit risk of a counterparty, that are significant to the Bank, and stress testing have been approved by the Bank’s authorized bodies in accordance with the legal acts and recommendations issued by the Bank of Russia. We also found that, as at 31 December 2020, the Bank had a reporting system pertaining to credit, market, operational, liquidity and concentration risks, as well as the credit risk of a counterparty, that were significant to the Bank, and pertaining to its equity (capital).
— We found that the frequency and consistency of reports prepared by the Bank’s risk management and internal audit functions during the year ended 31 December 2020 with regard to the management of credit, market, operational, liquidity and concentration risks, as well as the credit risk of a counterparty, complied with the Bank’s internal documents and that those reports included observations made by the Bank’s risk management and internal audit functions in respect of the effectiveness of relevant risk management methodologies.
— We found that, as at 31 December 2020, the authority of the Board of Directors and executive management bodies of the Bank included control over compliance of the Bank with internally established risk limits and equity (capital) adequacy requirements. For the purpose of control over the efficiency and consistency of the risk management procedures applied by the Bank during the year ended 31 December 2020, the Bank’s Board of Directors and executive management bodies regularly reviewed the reports prepared by the Bank’s risk management and internal audit functions.

The procedures pertaining to the internal control and risk management systems were conducted by us solely for the purpose of determining the conformity of certain elements of the internal control and risk management systems of the Bank, as listed in the Federal Law and described above, with the requirements set forth by the Bank of Russia.

MARIJA IGNATJEVA
Partner
Ernst & Young LLC

16 April 2021

Details of the audited entity

Name: CentroCredit Bank
Record made in the State Register of Legal Entities on 16 September 2002, State Registration Number 1027739198387.
Address: Russia 119017, Moscow, Pyatnitskaya ulitsa, 31/2, building 1.

Details of the auditor

Name: Ernst & Young LLC
Record made in the State Register of Legal Entities on 5 December 2002; State Registration Number 1027739707203.
Address: Russia 115035, Moscow, Sadovnicheskaya naberezhnaya, 77, building 1.
Ernst & Young LLC is a member of Self-regulated organization of auditors Association “Sodruzhestvo”. Ernst & Young LLC is included in the control copy of the register of auditors and audit organizations, main registration number 12006020327.