Company: FITBI
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000035527-25-000079
Chunk: 514

Company: FIFTH THIRD BANCORP
Filing Date: 2025-02-24
Form: 10-K
Item: Item 7
Chunk 514
---
 programs and strategies, and monitors reporting of potential misconduct, trends or themes across the enterprise. Prudent risk management is a responsibility that is expected from all employees and is a foundational element of Fifth Third’s culture.

•The Bancorp manages eight defined risk types to a prescribed appetite. The risk types are credit risk, liquidity risk, interest rate risk, price risk, legal and regulatory compliance risk, operational risk, reputation risk and strategic risk.

•The Bancorp identifies and monitors existing and potential risks that may impact the company’s risk profile, including emerging risks that create uncertainties and/or would have broad implications if materialized (e.g., contagion risks, climate change, etc.). Enhanced monitoring and action plans are implemented as necessary to proactively mitigate risk.

•Fifth Third’s Risk Management Process provides a consistent and integrated approach for managing risks. The five components of the Risk Management Process are: identify, assess, manage, monitor and report. The Bancorp has also established processes and programs to manage and report concentration risks, to ensure robust talent, performance and compensation management, and to aggregate risks across the enterprise.

Fifth Third drives accountability for managing risk through its Three Lines of Defense structure:

•The first line of defense is comprised of front-line units (and enterprise-wide functions that support front-line units) that create risk or are involved in risk-taking activities and are accountable for managing risk. These groups are the Bancorp’s primary risk takers and are responsible for implementing effective internal controls and maintaining processes for identifying, assessing, managing, monitoring and reporting on the risks associated with their activities consistent with established risk appetite and limits.

•The second line of defense, or Independent Risk Management, consists of Enterprise and Non-Financial Risk Management, Capital Markets Risk Management, Compliance, Financial Crimes, Model Risk Management, Credit Risk Management and Credit Risk Review. The second line is responsible for developing enterprise frameworks and policies to govern risk-taking activities, providing challenge and oversight of those activities, advising on controlling risk, assessing risks and issues independent of the first line of defense, and providing input on key risk decisions. Risk Management complements the front line’s management of risk-taking activities through its monitoring and reporting responsibilities, including adherence to the Bancorp Risk Appetite. Additionally, the second line of defense is responsible for identifying, assessing, managing, monitoring and reporting on aggregate risks enterprise-wide.

•The third line of defense is Internal Audit, which provides oversight of the first and second lines of defense, and independent assurance to the Board on the effectiveness of governance, risk management