Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 335

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 16
Chunk 335
---
 prevention and protection, the management of information security incidents and cybernetics and management of the multidisciplinary Group for Tactical Actions to Incidents of Information Security and Cybernetics (GATI), assessing more severe security incidents and their potential impacts on the business. It offers technical leadership support to the Corporate Crisis Management area, and is responsible for the Computer Security Incident Response Team (CSIRT) activity, for the prevention, detection, and resolution of security incidents. It performs analyses and proposes and maintains solutions for emerging threats and global trends to prevent transactional fraud in all channels, using the “ Red Team”, Forensic and Open-Source Intelligence (OSINT), acting in the evaluation of security solutions that help mitigate the incidence of fraud and attacks trough digital channels and helps to ensure a secure and user-friendly customer experience;

• The
Electronic Fraud-Prevention: Bradesco App, Internet Banking, Net Empresa, Fone Fácil: we always seek to anticipate risk mitigation in our operations, monitor our data and transactional environments on an uninterrupted basis (24 hours a day and 7 days a week), employing technology processes and people specialized in the subject. Products and services are analyzed by teams of experts, who have the mission to continuously act in the prevention and correction of actions to ensure the security of information and systems that support the business, aligned with our client’s usability. We are among one of the first banks to receive the Fraud Prevention Seal of the National Confederation of Financial Institutions (CNF), in partnership with FEBRABAN, which promotes centralized, optimized and standardized measures for the handling financial system incidents;

• Access Management: responsible for setting the strategy and operational direction of the process
for identification and access to corporate applications and Open-Source Intelligence (SOX) compliance departments, defining and maintaining
the Access Management methodology for employees and non-employees. This area aims to protect system resources and information against
unwanted access, following the principles of segregation of duties, required access and the definition of automated controls, considering
Internal and External Standards and Regulations;

•Authentication Methods: responsible for defining standards for minimum client authentication controls
in service systems and channels, monitoring projects involving the use of Biometrics, Passwords and Physical and Logical Device to generate
One Time Password (OTP);

  236 – Form 20-F 2024 | Bradesco  

  Table of Contents  

•Information Security for Third Parties (SIT): its mission is to ensure the trust of our clients; Driving and innovation in our business while