Company: BBVXF
Filing Date: 2025-02-14
Form Type: 6-K
Source: 0001193125-25-027348
Chunk: 106

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-14
Form: 6-K
Chunk 106
---
 or corporate transactions that are going to be submitted to the consideration of the Board of Directors or the Executive Committee, within the scope of their respective remits. Takes part in the process of establishing the remuneration policies, ensuring that they are compatible with an adequate and effective risk management strategy and that it does not offer incentives for risk-taking that exceeds the level tolerated by the Bank. This English version is a translation of the original in Spanish for information purposes only. In case of discrepancy the original in Spanish shall prevail.

Annual Corporate Governance Report of BBVA .109.. Reviews draft codes of ethics and conduct and sees to it that the risk and compliance culture is observed all across the Group. EXECUTIVE COMMITTEE Regularly receives the following information on Group risks: monthly report of the Chief Executive Offi cer; Monthly report of the director of Global Risk Management (GRM); annual report on reputational risk; and periodic report of the Global Head of Finance on structural risk management (ALCO portfolio—Asset and Liability Committee ) It monitors the trend in the risk profi le and the key metrics defi ned by the Board of Directors, so as to obtain a full picture of the progress made by the Group’s businesses and its business units. It also remains abreast of any deviations or non-complianceswith the metrics of the Risk Appetite Framework and takes action as and when needed within the scope of its remit. It proposes to the Board or, as the case may be, determines the basis for drawing up the Risk Appetite Framework, in close alignment with the rest of the Bank’s strategic and forward-looking decisions and with its other management objectives. It assists the Board of Directors in making decisions related to business risk and reputational risk. TECHNOLOGY AND CYBERSECURITY COMMITTEE Regularly receives the following information on technological and cybersecurity risks to which the Group is exposed: In addition, at each of the meetings held, the Committee was informed on: (i) cybersecurity attack events; (ii) relevant events to have affected the Group in the area of system reliability and continuity; and (iii) reviews carried out by the Internal Audit area on technological issues in which critical or signifi cant weaknesses had been identifi ed; a half-yearly report by the head of RCS IT Risk on the progress made toward the mitigation plans for the Group’s various technology risks; regular reports on the main strategic projects relating to resilience, cybersecurity, data security and protection, and fraud prevention and management. When it comes to monitoring technology risk, the Committee carries