Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 338

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 16
Chunk 338
---
 and prioritize the level of risk exposure;

•Offensive Security: identify and proactively exploit vulnerabilities to measure and validate the
resilience of security controls to current methods of cyberattacks through realistic scenario attacks. Portfolio of activities: Security
tests, Intrusion tests (Pentests), Red Team Exercises, Adversary simulation, Vulnerability scans, etc.;

•Security Operations Center (SOC): perform security monitoring in real-time infrastructure to identify
malicious and/or suspicious threats and behavior based on scenarios, rules and cases using also event history, risks and non-compliance
with cybersecurity requirements, performing cyber incident response processes that include monitoring, detection, containment and response
in technology assets, obtaining, treating and analyzing data and logs, considering internal and external sources. Perform information
analysis (“computer forensics”) for the business areas, second and third line of defense, involved in the incident;

•Intelligence and Security: generate and share security intelligence information through internal
and external research, using advanced analytical methods in various sources, with artificial intelligence capabilities to identify trends,
methods, threats and vulnerabilities of information security, bringing inputs to perform predictive actions, as well as building strategic
visions of how we are facing global threat scenarios, making it possible to make decisions regarding the topic of cybersecurity;

•Security Deployment, Support and Operational Processes: establish the requirements and guidelines
we adopt regarding the life-cycle of technological projects of information security solution deployments, operating and protecting technological
assets from threats, managing resources and users;

  238 – Form 20-F 2024 | Bradesco  

  Table of Contents  

•Privileged Account Management: ensure that only authorized users and accounts have approved access
to business applications, information systems, networks and computing devices (Operating System, Database, among others), that individual
responsibility is guaranteed and provides sufficient access privileges to allow them to perform their duties for as long as necessary,
but does not allow them to exceed their authority; and

•Research and Solutions: prospecting, evaluating and exploring new technologies and solutions to
prevent, mitigate and resolve current problems, incidents and vulnerabilities or potential future threats.

We also have other important
areas and functions in DITI, described below.

•IT Project Center: manage IT infrastructure projects, from identifying the need for technological
infrastructure to delivery in environments, coordinating and integrating engineering throughout the process;

•Mainframe Software Engineering: keep the software infrastructure installed on the Mainframe Platform
up to date, operational, available and reliable, supporting our business