Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 328

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 16
Chunk 328
---
 resilience, and in the threat identification process development, event detection,
efficient response and recovery processes in cases of cyber incidents.

With regard to technical
aspects, in order to prepare for and anticipate IT security threats, including cyber threats, the IT area promotes ongoing investments,
such as to reformulate the process of critical updates of servers and workstations, the process of inspecting the source code in the development
cycle, establish the infrastructure of the safety testing laboratory and promote the use of cutting-edge technologies/tools.

Our infrastructure has multiple
layers of security applied in both our external and internal perimeter. To protect against attacks from external connections and the internet,
we use Web Application and API Protection (WAAP) systems, DDoS prevention, and DNS protection, among others. In addition, we have systems
for fraudulent behavior analysis, detection of improper access, malicious codes, analysis of network and user behavior, intrusion protection
products (intrusion detector), firewall, Endpoint Detection and Response (EDR), ransomware and antispam, and encryption, among others,
aiming to provide comprehensive protection to our IT environment. In addition, we have a program for continuous updating our software
and hardware, vulnerability management and frequent execution of resilience tests and conducting “ Penetration Tests” by independent
and internal audit companies. We have also implemented a data loss prevention system (DLP) at rest and in transit, developed to ensure
the protection of our data.

We have continuous monitoring
mechanisms, such as security operational centers (SOCs), structured in the area of IT Security, focused on identifying and dealing with
potential vulnerabilities, based on an incident response framework integrated with crisis management that describes roles and responsibilities
in three levels: Strategic, Tactical and Technical, covering the pillars of confidentiality, integrity and availability, with the aim
of establishing an active defense with the use of cognitive intelligence, monitoring of the environment (24/7) and prevention measures
through the use of intelligence information.

  231 – Form 20-F 2024 | Bradesco  

  Table of Contents  

To ensure the security and
privacy of our clients, we adopt strict security procedures. Management and technical areas communicate and interact with one another
in order to create solutions, provide secure access to service channels and minimize exposure and vulnerabilities. We have a range of
security devices and technologies, among them several biometric systems, chip cards, use of digital validation with OTP (One Time Password)
devices and physical signing transaction (Token) and Mobile (M