Company: CIB
Filing Date: 2025-11-14
Form Type: 6-K
Source: 0002058897-25-000052
Chunk: 27

Company: Grupo Cibest S.A.
Filing Date: 2025-11-14
Form: 6-K
Chunk 27
---
 the imposition of a tax on outbound transfers, which would translate into lower household consumption; and a more limited space for public spending, as the Government advances in meeting the fiscal consolidation objectives agreed upon with the International Monetary Fund. In this regard, it is considered that the fiscal front—which had become the main challenge in the macroeconomic outlook—could show improvement in the short term, while institutional capacity to respond to external shocks is strengthened. Finally, in terms of prices, inflation is expected to rebound in the short term as a result of disruptions in global trade; however, this effect would be temporary and would give way to inflation rates close to 1.3% in the medium term.

#### •

#### Third-party Risks
The outsourcing of activities within the Grupo Cibest Consolidated involves operational and strategic risks, especially if suppliers do not adequately comply with the contracted services. This situation can affect the achievement of objectives, disrupt operations, and increase exposure to cybersecurity risks, handling confidential information, fraud, and reputation, especially in the face of public or regulatory scrutiny.

During the third quarter of 2025, progress was made in the evaluation plan for critical suppliers, with the aim of strengthening the control environment and improving contracting processes, ensuring effective management of third parties.

#### •

#### Business Continuity And Technology Failures
In terms of operational resilience, business continuity, and technology failures, new operational contingencies continue to be developed to enable greater responsiveness to eventualities, such as the implementation of a fourth-generation Core, strengthening continuity strategies for digital channels, and further boosting cyber resilience with the activation of backup immutability in critical applications and digital vaults.

#### •

#### Model Risk
During the third quarter of 2025, progress was made from the design phase to the controlled operation of the model risk management framework. As part of this advancement, the Comprehensive Validation Framework for Generative AI models was implemented, which includes mandatory guidelines and technical tests for new use cases. Additionally, a new tiering methodology was integrated into the processes, complemented by the launch of a tool for its application and registration in the Model Risk Management (MRM) repository.

In regulatory matters, the general guidelines for model risk management were updated, an annex with special guidelines for Generative AI models was created, and specific validation guides with mandatory technical tests were developed.

The automation of the validation process was significantly expanded by incorporating additional quantitative modules focused on provisioning and liquidity risk models, achieving a 30% reduction in average review times compared to the usual standard and strengthening full