Company: INGVF
Filing Date: 2025-03-06
Form Type: 20-F
Source: 0001628280-25-010764
Chunk: 228

Company: ING GROEP NV
Filing Date: 2025-03-06
Form: 20-F
Item: Item 16K
Chunk 228
---
 capabilities as well as on behavioural aspects. Development gaps, if any, are identified quickly, regularly reviewed, and closed when possible. Relevant training and certification are being offered by the Tech academy or the local IT academies to help our employees develop further.
Every year ING enrols a mandatory cybersecurity e-learning to all countries, covering both in- and external employees. The content is based on the basic cybersecurity topics, and it is mandatory during the year for all new onboarded employees as well. The Management Board steers on 92% completeness (due to in/outflow, maternity leaves, illness) this is proven realistic. During the year there are many global (newsletters) and local (presentations) initiatives to cover the trending cybersecurity threat topics. 
On an annual basis a Permanent Education Plan for the EB/MBB and SB is drafted in which topics related to IT/digitalisation, including IT risk management are covered. Such sessions include, e.g. sessions on Operational Resilience, Cyber, Cybersecurity/Ransomware, and digitalisation.

ING Group Annual Report 2024 on Form 20-F 

Contents       Part I         Part II        Part III       Additional information        Financial statements    
The members of supervisory and oversight bodies have a broad competency in the area of IT & Cybersecurity. In the Management Board Banking of ING Bank, which has ING Groep as its sole shareholder, a dedicated Chief Technology Officer role is embedded. The Global Head of CISO reports directly to the CTO. The CTO is a technology executive with over 20 years of experience in leadership roles in the financial industry. The CTO has a strong understanding of data, technology, the application of it in ING’s operations and the risks related to it.
ING Global CISO is actively involving internal and external stakeholders on actions to manage cybersecurity relevant measures and impacts. This includes staff, board members, customers, partners, suppliers, governments, and regulators. Examples of active involvement are a yearly mandatory cybersecurity e-learning, covering both in- and external employees, ING podcasts, webinars and round table sessions with clients and suppliers, and on our websites we provide useful information to improve resilience for retail customers.

ING Group Annual Report 2024 on Form 20-F 

Contents       Part I         Part II        Part III       Additional information        Financial statements    
PART III.