Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 317

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 317
---
 ongoing developments, threats and challenges, Deutsche Bank has the responsibility to preserve the confidentiality, integrity, and availability of clients’, as well as business partners’ data and of its own information assets, including the bank’s employees’ information. Doing so consistently and effectively is essential for retaining the trust of the various stakeholders and preserving their interests. Due to the dynamic and complex nature of the environment, Deutsche Bank is continuously monitoring the security threat landscape. The bank vigilantly observes technological developments, the geopolitical landscape and economic impacts driving security risks and assesses their relevance for potential impacts to itself and the wider financial ecosystem. Deutsche Bank adjusts its security capabilities accordingly to safeguard its ability to provide products and services to clients and protect the continued operations of the bank’s businesses. This section provides a comprehensive insight into Deutsche Bank’s approach to information security, detailing the bank's continuous efforts to protect data and services robustly, including its security governance structure, security strategy, and security risk management. Governance Responsibilityfor security matters at Deutsche Bank sits within the Chief Security Office. The Group Chief Security Officer (CSO) has delegated authority from the Management Board, including approval of the security policies and the security strategy for the Deutsche Bank Group. The CSO reports directly to the Chief Technology, Data, and Innovation Officer, who is a member of the Management Board. The Management Board is accountable for the implementation of the information security framework, with oversight from the Supervisory Board. There are multiple mechanisms in place for the CSO to escalate security issues directly to the Management Board if required. Deutsche Bank’s CSO has served in various roles in information security for more than 20 years. This includes roles as global Chief Information Security Officer (CISO)/Chief Security Officer (CSO) for three different large European financial institutions and a partner position in a global strategy and consulting firm, leading security work for financial service clients. The Group Chief Security Officer is supported by security role holders at various seniority levels across the bank to ensure that security requirements are met from a regional, divisional, and technical perspective. All information security activities are overseen by two dedicated governance forums chaired by the CSO: the Group IT Security Council (interface to the bank’s IT units), and the Group Information Security Committee (interface to the bank’s business and infrastructure divisions). The independent Risk Management function for Information Security is represented in both forums. Both forums provide advice on the security strategy and oversee the progress and performance of key information security deliverables, the remediation status of information security related audit findings and information security incidents as