Company: BBVXF
Filing Date: 2025-02-14
Form Type: 6-K
Source: 0001193125-25-027348
Chunk: 111

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-14
Form: 6-K
Chunk 111
---
VA .114.. 1st Line of Defense BUSINESS AND SUPPORT AREAS Each area is responsible for managing and controlling operational risks in respect of its products, activities, processes and systems, including those activities carried out by third parties, identifying and assessing operational risks, running controls and deploying mitigation plans for those risks with a residual level that exceeds the level that may be acceptably borne. Each area has, as an additional control role, a Risk Control Assurer (RCA), who ensures the proper management of operational risk in their area, and who has the organizational structure and sufficient resources for the effective performance of their function. Independent from the rest of the Bank’s areas, as its Head reports hierarchically to the Board of Directors, through the Risk and Compliance Committee, which oversees the effective performance of this function and sees to it that it has the resources it needs at all times to fulfil its duties. It comprises various control units that report to the Head of the Regulation & Internal Control to ensure coordinated action and to ensure its independence from the various areas that make up the first line of defense: (i) Non-FinancialRisk Units, both corporate and local. (ii) Risk Control Specialists, both corporate and local, in the areas of Compliance, Internal Risk Control, Finance, Processes, IT Security, Physical Security, Information and Data Security, Legal, People and Third Parties. The Risk Control Specialists operate transversally across all BBVA geographies, exercising their functions in those areas where operational risks affecting their area of expertise may materialize. (iii) Reputation Unit, responsible for coordinating reputational risk management, in line with the Group’s internal control model. It performs an independent review of the internal control model, verifying compliance with and the effectiveness of the established general policies, and its Head reports to the Board of Directors. 2nd Line of Defense REGULATION & INTERNAL CONTROL 3rd Line of Defense INTERNAL AUDIT This English version is a translation of the original in Spanish for information purposes only. In case of discrepancy the original in Spanish shall prevail.

Annual Corporate Governance Report of BBVA .115.. 13.5. Other issues related to risk management and control (E.3) A. Emerging risks As indicated, BBVA has processes in place to identify risks and analyze scenarios, thus enabling dynamic and preemptive risk management. These processes are forward-looking to ensure the identification of emerging risks. Risks are captured and measured consistently and with methods considered appropriate. Their measurement includes the design and application of scenario analyses and the application of