Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 106

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 4
Chunk 106
---
 Inventory of Organization Models and measuring and controlling the Model Risk.
 
4.B.20.03 Internal controls
 The Internal Controls area acts proactively in the management of the risks existing in the processes, as well as in the effectiveness of the controls, in order to keep them at acceptable levels to us.
 The scope and activities of our Internal Control area are aligned with the Frameworks issued by COSO – the Committee of Sponsoring Organizations of the Treadway Commission (Internal Control – Integrated Framework (2013) and Enterprise Risk Management – Integrated Framework) and with the guidelines established by the Information Systems Audit and Control Association (ISACA) through the Control Objectives for Information and Related Technology (COBIT 5). 
 The Internal Controls area supports the first line areas on the identification and evaluation of risks and controls, and the result of this activity is reflected in the risk maps for each business units, which are reviewed in light of the annual action plan issued by the Internal Controls area. In addition, it carries out thematic reviews to enhance the evaluation of the control environment of a given area, and the results of which are presented through thematic reports, with the identified risks and weaknesses being incorporated into the risk maps of each area.

55 – Form 20-F 2024 | Bradesco
------------------------------
Risk management topics, issues and internal controls are observed and discussed at all levels of our Group, according to the established current governance framework. They are promptly reported to risk forums to ensure appropriate handling resolution.
 In addition, the systematic monitoring of activities related to the internal controls system is, at least once a year, consolidated in a report and submitted to the responsible governance forums.
 Internal controls effectiveness is supported by trained professionals and processes compatible with our size and structure, as well as technology as determined by our business needs.
 
4.B.20.04 Data processing
 
·               Our information technology services are frequently updated and are supported by a Data Center (CTI –           
    Centro de Tecnologia da Informação), with an area of 11,900 square meters, specially built to harbor our IT infrastructure,
                 and which has protections in place designed to ensure the continuous availability of our services.            
-------------------------------------------------------------------------------------------------------------------------------

·               Data is continually processed in a processing center (secondary site) located in Alphaville, in the city            
       of Barueri – SP, which has equipment with enough capacity to take over the system’s critical activities in the event of a    
    problem at our CTI. The main service channels have telecommunications