December 8 th 2010

1. AXP Global Crisis Management Program OverviewDavid C Taylor Director, Global Security, Crisis Management - EMEA Region December 8th 2010

2. The Company - A Few Facts and Figures • The German CMO Exercise • The American Express Company: • Employs approximately 60,000 people worldwide plus contract and agency staff • Operates in nearly 50 Countries • Headcounts per location range from nearly 5,000 down to 1 • Provides a wide range of financial products to consumers and corporations • Provides a wide range of travel related services to consumers and corporations

3. The Company’s Global Crisis Preparedness Program Our People Our Business EVENT Emergency Response Business Continuity • The German CMO Exercise PREVENTATIVE MEASURES Crisis Management Technology – Disaster Recovery Our Customers Customer Crisis Recovery

4. The AXP Crisis Management Organizations (CMO’s) • American Express has 23 CMO’s • Crisis Management Organizations are arranged geographically, not by line of business. • They provide crisis management services to every employee and work location regardless of size or location • Enables flexibility of response • Enables a ‘local’ and therefore often more focused response • The German CMO Exercise

5. A Typical AXP Crisis Management Organization • The German CMO Exercise • Crisis Management Team (Senior Business Leaders) - Focus: • Business and Customers • Corporate Communications • Legalities and Liabilities • Ethical issues • Shareholders and Board of Directors CMT Business Level • Crisis Response Team (Senior Utility Reps.) - Focus: • Assessment of threats and events and declaration of a crisis • Life/Safety of Employees/Visitors etc. • Brand Image • Operations and Assets • Operational response – support/utility function perspective CRT Operational Level • 2 x Primary Dependent Site Coordinators • Report Threats or Events • Coordination between CRT and Sites Leadership Team Primary Sites (100+ Headcount) Site Level Secondary Sites (1 to 99 Headcount) • 2 Secondary Dependent Site Contacts • Report Threats or Events

6. A Typical AXP Crisis Management Organization Business Response Crisis Management Operational Response • The German CMO Exercise Security Business Recovery Leadership BRL CMT Safety BCP Teams CRT BCP Coordinator BCP Teams Team Members Security Safety HR PA&C Health Services Real Estate BCP Tech. DR CRT Administrators Human Resources Utility Services Coordinators Public Affairs & Comms Technology Recovery Leadership TRL Technologies DRP and NI Coordinators Health Services DR Teams Primary Dependent Site Coordinators (Representing Local Management Teams) Real Estate NI Recovery Teams

7. The AXP Global Crisis Management Program • The German CMO Exercise That’s about it Any Questions?