Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 319

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 319
---
 to safeguard its ability to provide products and services to clients and protect the continued operations of the bank’s businesses. Stable and resilient services support stakeholder trust, help grow business and revenue opportunities and protect brand value. Increasing frequency and complexity of recent cyberattacks has resulted in an elevated risk profile for many organizations around the world, including Deutsche Bank. The bank continuously monitors the security threat landscape and vigilantly observes technological developments, the geopolitical landscape and economic impacts driving security risks, assessing their relevance for potential impacts. Sophisticated and often financially motivated cyberattacks, including ransomware, can be observed as persistent threats across industries and are expected to become even more frequent. Additional threats are posed by supply chain attacks, a growing number of critical software vulnerabilities potentially exploited by threat actors (zero-day exploits), and an increased threat surface introduced by, for example, remote ways of working. 2024 focus areas continued to include supply chain risk and common attack scenarios like Ransomware or Denial of Service, as well as emerging risks such as Artificial Intelligence and Quantum Computing. Ongoing geopolitical unrest continues to drive cyber-attack activity across various threat actor types. Distributed Denial of Service (DDoS) attacks are growing in occurrence, frequency, and intensity. Technological advancements pose demands on data privacy and security. As the use of artificial intelligence becomes widespread, there are also increased risks to cybersecurity, such as the criminal use of deepfakes, and more sophisticated social engineering attacks. Third-party software or technology solution providers will continue to be a key target for threat actors, who see such supply chain attacks as means to compromise or disrupt a larger number of downstream customers and assets, amplifying the impact of their attacks. Failure to embed and ensure oversight of security requirements into the bank’s framework to best address associated risks and subsequent appropriate implementation can lead to breaches of confidentiality and integrity of information, and unavailability of information and/or services. Additionally, Deutsche Bank may face operational risks arising from failures in the control environment, including errors in the performance of processes or security controls, as well as loss of data, which may disrupt business and lead to material losses. Security breaches can occur due to unauthorized access to networks or resources, unauthorized access to or loss/destruction of confidential information, unintentional exposure of vulnerabilities in the bank's infrastructure, the introduction of computer viruses or malware, technology failures or other forms of cybersecurity attacks or incidents, including breaches of the security of third-party computer systems.

| 98 |

| Deutsche Bank      |
| Annual Report 2024 |

In case of a