Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 298

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 298
---
’ approach was piloted, which allows for better quantification of potential Operational Risks.

| 83 |

| Deutsche Bank      |
| Annual Report 2024 |

Risk & Control Assessment: The risk and control assessment process comprise of a series of bottom-up assessments of the risks generated by business divisions and infrastructure functions, the effectiveness of the controls in place to manage them, and the remediation actions required to bring the risks within the risk appetite. The Risk & Control Assessment is performed at a global business level and as such covers all jurisdictions. It is designed to assist Senior Management to determine whether operational risks are being managed and controlled adequately via a dynamic assessment approach which covers all applicable Risk Types from the Group’s Non-Financial Risk Type Taxonomy (NFRTT). The Risk & Control Assessment puts a greater emphasis on assessing and mitigating risks that are outside of appetite and risks that drive unethical and inappropriate market conduct within the bank. In 2024, the RCA granularity was enhanced to provide specific risk insights and ensuring a more accurate risk profile for comparison against the defined risk appetite. Top risks: The Top Risk Reporting process is a regular process to identify the risks which pose greatest concern across Group and divisions, in addition to ensuring there is commensurate remediation activity associated to mitigate the risk. The associated Top Risk reporting provides a forward-looking perspective on the impact of top risk reduction programs, comprising of planned remediation and control enhancements, indicating the expected timeframe for reduction. The reporting also contains emerging risks and themes that have the potential to influence the top risk population in the future. The top risk identification process is closely connected to both the risk and control assessment and risk appetite, consuming the risk exposure from the former and the appetite levels from the latter to help inform the top risk population. In 2024, the Top Risk Reporting Process was decommissioned and integrated into the risk appetite process. Transformation Risk Assessment: To identify and appropriately manage risks from material change initiatives within the bank, a transformation risk assessment process is in place to assess the impact of transformation (including bank’s future joint ventures and strategic investments) on the bank’s risk profile and control environment. The assessment considers impacts to financial and non-financial risk types and is mandatory for a subset of initiatives, categorized as key deliverables (typically includes regulatory initiatives, technology migrations, remediation initiatives, strategy and organizational changes). Risk appetite: Non-financial risk appetite reflects the amount of non-financial risk the bank is willing to accept to pursue its strategy. The non-financial risk appetite framework