Company: BBVXF
Filing Date: 2025-02-14
Form Type: 6-K
Source: 0001193125-25-027348
Chunk: 192

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-14
Form: 6-K
Chunk 192
---
 among other units, Compliance) and the implementation of risk and compliance cultures across the Group. Notwithstanding the above, the Audit Committee receives directly the reports that the internal and external auditors make on their activities related to the control and management of the Group’s financial and non-financialrisks, within the framework of their responsibilities and in accordance with the coordination mechanism between Committees provided for in the Board Regulations, for the best performance of their duties. 43. The audit committee should be empowered to meet with any company employee or manager, even requesting that they appear without the presence of another manager. Compliant [ X ] Partially compliant [ ] Explain [ ] 44. The audit committee should be informed of any structural or corporate changes the company is planning, so the committee can analyse the transaction and report to the board of Directors beforehand on its economic terms and accounting impact and, in particular and when applicable, the proposed exchange ratio. Compliant [ X ] Partially compliant [ ] Explain [ ] Not applicable [ ] 42 / 49

ANNUAL CORPORATE GOVERNANCE REPORT OF LISTED COMPANIES 45. The risk control and management policy should identify or determine at least: a) The different types of financial and non-financialrisks the company is exposed to (including operational, technological, legal, social, environmental, political and reputational risks, including corruption-related risks), with the inclusion under financial or economic risks of contingent liabilities and other off-balance-sheetrisks. b) A risk control and management model based on different levels, including a specialised risk committee when sector regulations provide for this or the company deems it appropriate. c) The level of risk the company sees as acceptable. d) The measures in place to mitigate the impact of identified risks, should they materialise. e) The information and internal control systems to be used to control and manage the above risks, including contingent liabilities and off-balance-sheetrisks. Compliant [ X ] Partially compliant [ ] Explain [ ] 46. Companies should establish an internal risk control and management function in the charge of one of the company’s internal departments or units and under the direct supervision of the audit committee or some other dedicated board committee. This function should be expressly charged with the following responsibilities: a) Ensure that risk control and management systems are functioning correctly and, specifically, that major risks the company is exposed to are correctly identified, managed and quantified. b) Actively participate in the preparation of risk strategies and in key decisions regarding the management