Company: BBVXF
Filing Date: 2025-02-14
Form Type: 6-K
Source: 0001193125-25-027348
Chunk: 84

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-14
Form: 6-K
Chunk 84
---
 and risk strategy. Lastly, the Committee heard about the main communications and inspections carried out by the Group’s supervisory authorities, both domestic and foreign, including the recommendations, weaknesses or areas for improvement identified, as well as the action plans and other measures defined by the executive areas involved to resolve them in due course. This English version is a translation of the original in Spanish for information purposes only. In case of discrepancy the original in Spanish shall prevail.

Annual Corporate Governance Report of BBVA .87.. 6.8. Technology & Cybersecurity Committee In accordance with Article 36 of the Regulations of the Board of Directors, the Board has a specialized Committee, the Technology and Cybersecurity Committee, which the Bank set up on a voluntary basis in 2016 to support the Board in monitoring the Group’s technology strategy, as well as in overseeing technology risk and cybersecurity management, in a complementary and coordinated manner with other Board Committees, especially with the Risk and Compliance Committee, which carries out a holistic oversight of the risks to which the Group is exposed. 6.8.1. Composition of the Technology and Cybersecurity Committee (C.2.1) In accordance with the Regulations of the Technology and Cybersecurity Committee (article 3), the Committee shall be composed of at least three directors, the majority of whom must be non-executivedirectors. As of December 31, 2024, the composition of the Technology and Cybersecurity Committee was as follows: 6.8.2. Functions of the Technology and Cybersecurity Committee In accordance with the powers assigned to it by article 5 of the Technology and Cybersecurity Committee Regulations, and notwithstanding any other functions assigned to it by law, by the Bank’s internal regulations or by resolution of the Board, the Technology and Cybersecurity Committee shall perform the following functions, which fall into two categories: (a) Oversight of technological risk and cybersecurity management, such as: 1. Review the Group’s exposures to the main technological risks, including the risks related to information security and cybersecurity, as well as the procedures adopted by the executive area to monitor and control such exposures. 2. Review the policies and systems for the assessment, control and management of the Group’s technological infrastructures and risks, including the response and recovery plans in the event of cyberattacks. 3. Be informed of business continuity plans in matters of technology and technological infrastructure. NAME ROLE CATEGORY Carlos Torres Vila Chair Executive Raúl Galamba de Oliveira Director Independent Cristina de Parias Halcón Director Other external