NASDAQ OMX Group (NDAQ)

(i) OMX’s risk management organization

The following roles and responsibilities are included in OMX’s risk management in order to ensure compliance with laws and regulations, governance, coordination and the development of methodology, as well as operational risk management activities:

OMX’S RISK MANAGEMENT ORGANIZATION

The following roles and responsibilities are included in OMX’s risk management in order to ensure compliance with laws and regulations, governance, coordination and the development of methodology, as well as operational risk management activities:

The Board of Directors is ultimately responsible for adequate and efficient risk management.

The President is ultimately responsible for ensuring that risk management is applied in accordance with the Board’s directions.

The Group Risk Management & Control (GRMC) staff function has the task of governing and coordinating risk management with regard to organization, roles and responsibilities, framework including methodology, reporting and control. GRMC includes governance of Security, Risk Management, Insurance and Internal Control including coordination and support in the event of crises and major incidents.

Management (at executive, business area and business support level) is responsible for identifying, assessing, managing and reporting the risks found within their respective areas of responsibility.

Specialists in various security areas, such as operational and financial risk management and insurance, support management and others in the line organization with analyses and management of risks and incidents.

All employees and contracted personnel are, to a certain extent, included in risk management in their roles and respective areas of responsibility. Internal Audit is responsible for the independent audit of risk management, regarding both observance of governance, control activities and reporting.

(i) OMX’s risk management organization

The following roles and responsibilities are included in OMX’s risk management in order to ensure compliance with laws and regulations, governance, coordination and the development of methodology, as well as operational risk management activities:

OMX’S RISK MANAGEMENT ORGANIZATION

The following roles and responsibilities are included in OMX’s risk management in order to ensure compliance with laws and regulations, governance, coordination and the development of methodology, as well as operational risk management activities:

The Board of Directors is ultimately responsible for adequate and efficient risk management.

The President is ultimately responsible for ensuring that risk management is applied in accordance with the Board’s directions.

The Group Risk Management & Control (GRMC) staff function has the task of governing and coordinating risk management with regard to organization, roles and responsibilities, framework including methodology, reporting and control. GRMC includes governance of Security, Risk Management, Insurance and Internal Control including coordination and support in the event of crises and major incidents.

Management (at executive, business area and business support level) is responsible for identifying, assessing, managing and reporting the risks found within their respective areas of responsibility.

Specialists in various security areas, such as operational and financial risk management and insurance, support management and others in the line organization with analyses and management of risks and incidents.

All employees and contracted personnel are, to a certain extent, included in risk management in their roles and respective areas of responsibility. Internal Audit is responsible for the independent audit of risk management, regarding both observance of governance, control activities and reporting.

(i) OMX’s risk management organization

The following roles and responsibilities are included in OMX’s risk management in order to ensure compliance with laws and regulations, governance, coordination and the development of methodology, as well as operational risk management activities: