Company: BBVXF
Filing Date: 2025-02-14
Form Type: 6-K
Source: 0001193125-25-027348
Chunk: 120

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-14
Form: 6-K
Chunk 120
---
 together with the other relevant issues for the closing of the annual and six-monthlyfinancial statements, are revised and authorized by a Committee made up of the principal experts in these matters. (F.3.1) The Group’s current internal control model has expanded the catalogue of technological risks managed as non-financial risks to three distinct categories, under the responsibility of the Engineering Risk Control Specialist (RCS): PHYSICAL SECURITY IT SECURITY INFORMATION AND DATA SECURITY Covers risks arising from inadequate management of the physical security of assets (including technological assets, and therefore includes risks arising from improper physical access to infrastructure and facilities used in the management of fi nancial statements) and people, due to damage and deterioration of such assets. Covers the risks associated with the non-functioningor malfunctioning of systems for various reasons, the risk of integrity failure affecting systems or loss of data, including within the perimeter of coverage of the systems used to draw up the fi nancial statements. Covers risks due to unauthorized access, including the deliberate modifi cation or destruction of data, including those arising from cyber-attacks that affect the privacy, confi dentiality, availability and integrity of the information. This English version is a translation of the original in Spanish for information purposes only. In case of discrepancy the original in Spanish shall prevail.

Annual Corporate Governance Report of BBVA .124.. The internal control models include procedures and controls regarding the operation of information and access security systems, the segregation of functions, and the development and modification of computer applications used to generate financial information. Both types of control are identified in the internal control model for financial information and are analyzed and assessed periodically, in order to guarantee the integrity and reliability of the information drawn up. Consequently, the control model of the BBVA Group covers the adequate management of access control, establishes the correct and necessary steps taken to put applications into production as well as ensuring their subsequent support, the creation of backup copies, and assurance of continuity in the processing and recording of operations. In summary, the entire process of preparing and publishing financial information has established and documented the procedures and control models for technology and IT systems necessary to provide reasonable assurance of the correctness of the BBVA Group’s public financial information. (F.3.2) The internal control model includes specific procedures and controls over the management of subcontracted activities, or over the evaluation, calculation or valuation of assets or liabilities entrusted to independent experts. There is a specialist area for risk (RCS) arising from third party operations, a set of regulation and a non-financialrisk