Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 296

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 296
---
 owners as the 1st LoD have full accountability for their operational risks and manage these against a defined risk appetite. Risk owners are those roles in the bank whose activities generate - or who are exposed to - operational risks. As heads of business divisions and infrastructure functions, they must determine the appropriate organizational structure to identify their operational risk profile, actively manage these risks within their organization, take business decisions on the mitigation or acceptance of operational risks to ensure they remain within risk appetite, and establish and maintain 1st LoD controls. Operational risk requirements for the 2nd LoD: Risk Type Controllers act as the 2nd LoD control functions for all sub-risk types under the overarching risk type “Operational Risk”.

| 82 |

| Deutsche Bank      |
| Annual Report 2024 |

Risk Type Controllers establish the framework and define Group level risk appetite statements for the specific operational risk type they oversee. Risk Type Controllers define the minimum risk management and control standards and independently monitor and challenge risk owners’ implementation of these standards in their day-to-day processes, as well as their risk-taking and risk management activities. Risk Type Controllers provide independent operational risk oversight and monitor the risk type’s profile against the defined risk appetite. As risk type experts, Risk Type Controllers define the risk type and its taxonomy and support and facilitate the implementation of the risk type framework in the 1st LoD. To maintain their independence, Risk Type Controller roles are located only in infrastructure functions. Operational risk requirements for NFRM as the Risk Type Controller for the overarching risk type “Operational Risk”: As the Risk Type Controller / risk control function for operational risk, NFRM establishes and maintains the overarching Operational Risk Management Framework and determines the appropriate level of capital to underpin the Group’s operational risk. – As the 2nd LoD risk control function, NFRM defines the bank’s approach to operational risk appetite and monitors its adherence and consequences in case of operational risks outside the defined risk appetite. NFRM provides the oversight of risk and control mitigation plans to return the bank’s operational risk into its defined risk appetite, where required; it also establishes and regularly reports the bank’s operational risk profile including operational risks which are outside the defined risk appetite. – As the subject matter expert for operational risk, NFRM provides independent risk views to facilitate forward-looking management of operational risks, actively engages with risk owners (1st LoD) and facilitates the implementation of risk management and control standards across the bank – NFRM is accountable for the design, implementation,