Company: BCDRF
Filing Date: 2025-02-28
Form Type: 20-F
Source: 0000891478-25-000054
Chunk: 151

Company: Banco Santander, S.A.
Filing Date: 2025-02-28
Form: 20-F
Chunk 151
---
 with the rest of our policies. We conduct a risk and control self-assessment (RCSA) in all our subsidiaries and units to identify residual risk within the organization. It involves assessing the inherent risks of our business activities in terms of financial crime, with money laundering and terrorism financing key factors and bribery and corruption also factors that we consider. Marketing, Sponsorships, Vendor Management and Human Resources are the areas with the highest exposure to the ABC risk taxonomy. In 2024, we continued to enhance our awareness strategy, which is based on the programmes included under our corporate framework, by combining basic training with customized programmes. Throughout the year, we ran technical sessions, FCC risk awareness workshops, courses on ABC risks for procurement staff, and specialized training for board members. Thus the Group’s annual programmes cover FCC risks sufficiently. Our training plans, which we supplement with compliance programmes, help raise awareness among all the Group’s employees. As one of our KPI, the number of employees we train in the Group highlights our firm commitment to mitigating bribery, corruption and other FCC risks. This cover all risks functions takers. In particular: ◦ 166,199 employees trained in FCC. In 2024, we continued to bolster our assessment and mitigation of the risks related to outsourcing and supplier relations in order to automate the controls stemming from the ABC programme. To support this initiative, Group employees received specialized training on ABC and our code of conduct. This is a step forward that bolsters Santander’s operational resilience and regulatory compliance significantly.

| For more detailed information on this issue, see section4.4 'Our suppliers'. |

Detecting and managing FCC incidents Per FCC laws, the financial intelligence units in all our markets have a robust system to detect, investigate, respond to and inform the authorities of suspicious transactions in terms of FCC (including those with indications of bribery or corruption). This system includes internal controls, lines of action and independent investigation committees that operate outside of the chain of command to preserve impartial incident management. The findings of these investigations are reported regularly to the Group’s management and oversight bodies. Highlights of key activities r elated to detection and cooperation with authorities activities in 2024 include:

| 231,810                    |     |                  453,175 |
| disclosures to authorities |     | investigations conducted |

Moreover, our whistleblowing channel, which we manage according to the Group General code of conduct and Canal Abierto policy, is where individuals can report violations of laws and internal compliance regulations related to the fight against financial crime (