Company: TFC
Filing Date: 2025-03-17
Form Type: DEF 14A
Source: 0001193125-25-055156
Chunk: 35

Company: TRUIST FINANCIAL CORP
Filing Date: 2025-03-17
Form: DEF 14A
Chunk 35
---
 concerns regarding:

| • | accounting, internal accounting controls, or auditing matters that are or are suspected of being questionable, inappropriate, or illegal; and |

| • | actual or suspected material violations or breaches: |

| ○ | of applicable federal or state securities laws, |

| ○ | fiduciary duties arising under applicable federal or state laws, or |

| ○ | similar material violations of any federal or state law. |

We offer multiple avenues for submitting complaints or concerns, including an anonymous reporting hotline available through a third party provider. Complaints or concerns regarding these matters are referred to our Chief Legal Officer, who is responsible for assessing and, if reasonably possible and appropriate in the judgment of the Chief Legal Officer, overseeing the investigation of reported matters. The Audit Committee periodically reviews and recommends changes to this policy and receives reports on both non-substantiatedand substantiated matters. Risk Oversight Truist seeks to maintain a comprehensive ERM Framework supported by people, processes, and systems to identify, measure, monitor, manage, and report on significant risks arising from exposures and business activities. Truist’s ERM Framework is designed to promote the execution of strategic goals and objectives in alignment with Truist’s risk appetite to realize its Purpose, Mission, and Values. We place significant emphasis on risk management and maintain a separate Board-level Risk Committee, which plays a key risk oversight role within our ERM Framework. Among its responsibilities, the Risk Committee monitors our policies, programs, and plans established by management to identify, measure, monitor, assess, manage, and report on risks arising from Truist’s exposures and business activities. The Risk Management Organization (“RMO”) is led by the Chief Risk Officer and is responsible for overseeing (i) the establishment and monitoring of enterprise-wide risk limits, (ii) the implementation and ongoing compliance with risk management policies, procedures, processes, and systems, and (iii) the management of risks, controls, monitoring, and testing. The Chief Risk Officer chairs the Enterprise Risk Committee, which provides oversight based on an integrated view of risks across our organization, including strategic, compliance, credit, liquidity, market, operational, technology, and reputational risks, and is responsible for escalating and resolving risk management concerns and reporting emerging risks to the Risk Committee. The ERM Framework is supported by three lines of defense to manage risk as follows.

| • | First Line of Defense. Consisting of the Business Unit Risk Owners (“BU Risk Owners”) and the Governance and Controls Organization (“GCO”), teammates