Company: WAL-PA
Filing Date: 2025-04-23
Form Type: DEF 14A
Source: 0000950170-25-057334
Chunk: 15

Company: WESTERN ALLIANCE BANCORPORATION
Filing Date: 2025-04-23
Form: DEF 14A
Chunk 15
---
VERNANCE |

Every employee of the Company is responsible for the Company's effective risk management:

| FIRST LINE OF DEFENSE (1LOD) |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |     |                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |     |                                                    |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|                              |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |     | SECOND LINE OF DEFENSE (2LOD) |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |     |                                                    |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|                              |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |     |                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |     | THIRD LINE OF DEFENSE:INTERNAL AUDIT SERVICE (IAS) |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|                              | Who are the key players?1LOD consists of all Company employees, the Business Units and Departments that engage in revenue generating activities, provide operational support or services to another unit/department, deliver services to Company customers, or provide technology services to a unit or department.What are they responsible for?1LOD is responsible for self-identifying, measuring, and effectively managing the risks associated with their activities and are also responsible for ensuring that related controls are operating effectively (i.e., addressing control deficiencies).What is the reporting and oversight?1LOD is primarily evaluated by the full Board through the Company’s executive officers' reports to the Board regarding the risks within their areas of responsibility. The Board hold senior management accountable for assessing and managing material risks associated with the Company’s activities. |     |                               | Who are the key players?2LOD consists of independent Risk Management and Compliance functions overseeing, measuring, and reporting the Company’s material risks.What are they responsible for?These responsibilities include identifying, measuring and monitoring, current and emerging risks; developing and maintaining enterprise-wide standards for risk identification and measurement practices; providing credible challenge to the 1LOD’s risk identification, measurement, and management; and providing effective reporting to senior management and the Board on all material current and emerging risks facing the Company.What is the reporting and oversight?The 2LOD functions include Risk Management functions that report to the CRO, Credit Risk Review, and Financial Crimes Compliance. |     |                                                    | Who are the key players?IAS performs testing of the effectiveness of the Company’s system of current internal controls as well as significant infrastructure enhancements and notifies groups of potential audit issues. IAS challenges management to create and maintain appropriate updated policies along with procedures and effective