Company: CMA
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000028412-25-000108
Chunk: 403

Company: COMERICA INC
Filing Date: 2025-02-24
Form: 10-K
Item: Item 8
Chunk 403
---
's major risk elements and a risk appetite statement that outlines the levels and types of risks the Corporation accepts. The Corporation continuously enhances its enterprise risk framework with additional processes, tools and systems designed to not only provide management with deeper insight into the various existing and emerging risks in accordance with its appetite for risk, but also improve the Corporation's ability to control those such risks and ensure that appropriate consideration is received for the risks taken.

The Corporation’s front line employees, the first line of defense, are responsible for the day-to-day management and ownership of risks, including the identification, assessment, measurement and control of risks encountered as a part of the normal course of business. Each of the major risk categories are further monitored and measured by specialized risk managers in the second line of defense within the Enterprise Risk Division, who provide oversight as well as independent and effective challenge and guidance for the risk management activities of the organization. The Enterprise Risk Division, led by the Chief Risk Officer, is responsible for designing and managing the Corporation’s enterprise risk management framework and ensures effective risk management oversight. Risk management committees serve as a point of review and escalation for risks that may have risk interdependencies or where risk levels may be nearing the limits outlined in the Corporation’s risk appetite statement. These committees comprise senior and executive management that represent views from both the lines of business and risk management. Internal Audit, the third line of defense, monitors and assesses the overall effectiveness of the risk management framework on an ongoing basis and provides an independent, objective assessment of the Corporation’s ability to manage and control risk to management and the Audit Committee of the Board.

The Enterprise Risk and Return Committee, chaired by the Chief Risk Officer, was established by the Enterprise Risk Committee of the Board and is responsible for overseeing the risk management framework, providing oversight of the Corporation's aggregate risk position and reporting on the comprehensive portfolio of risks as well as the potential impact these risks can have on the Corporation's risk profile and resulting capital level. Capital provides the primary buffer for risk and also serves as a measuring tool when evaluating risk. The Enterprise Risk and Return Committee is principally composed of senior officers and executives representing the different risk areas and business units who are appointed by the Chairman and Chief Executive Officer of the Corporation.

The Board's Enterprise Risk Committee meets quarterly and is chartered to assist the Board in promoting the best interests of the Corporation by overseeing policies and risk practices relating to enterprise-wide risk and ensuring compliance with bank regulatory obligations. Members of the Enterprise Risk Committee are selected such that the committee comprises individuals whose experiences and qualifications can lead to broad