Company: BBVXF
Filing Date: 2025-03-21
Form Type: 6-K
Source: 0000842180-25-000016
Chunk: 62

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-03-21
Form: 6-K
Chunk 62
---
 monitoring of the evolution of the risk profile of the Group) and to the Board of Directors, which will be responsible, when applicable, for implementing the corresponding executive measures, including the modification of any metric of the Risk Appetite Framework. For this purpose, the CRC will submit to the corresponding corporate bodies all the information received and the proposals prepared by the executive areas, together with its own analysis.

Notwithstanding the foregoing, once the information has been analyzed and the proposal of corrective measures has been reviewed by the CRC, the CDP may adopt, on grounds of urgency and under the terms established by law, measures corresponding the Board of Directors, but always reporting those measures to the Board of Directors in the first meeting held after the implementation for ratification purposes.

In any case, an appropriate monitoring process will be established (with a greater information frequency and granularity, if required) regarding the evolution of the breached or deviated metric, and the implementation of the corrective measures, until it has been completely redressed, with the corresponding reporting to corporate bodies, in accordance with its risks monitoring, supervision and control functions.

Notwithstanding the provisions of this section, more robust monitoring and management models for breaches may be defined in executive-level regulations in cases where a breach of a metric within the Risk Appetite Framework occurs (or is anticipated). These breaches will be reported to the CRC, the CDP, and the Board as outlined in this section, or more frequently if deemed appropriate.

Integration of the Risk Appetite Framework into the management

The transfer of the Risk Appetite Framework to ordinary management is underpinned by three basic elements:

1. The existence of a standardized set of regulations: the corporate risks area defines and proposes the general policies within its scope of action, and develops the additional internal regulation required for the development of those policies and the operating frameworks on the basis of which risk decisions must be adopted within the Group. The approval of the general policies for all types of risks is a responsibility of the corporate bodies of BBVA, while the rest of regulation is defined at an executive level according to the framework of

| PILLAR 3 2024 |     | 4. RISK |     | P.69 |

competences applicable at any given time. The Risks units of the geographical and/or business areas comply with this regulation and performing, where necessary, the relevant adaptation to local requirements, in order to have a decision-making process that is appropriate at local level and aligned with the Group's policies.

2. Risk planning, which ensures the integration