Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 318

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 318
---
 well as the information security posture of Deutsche Bank Group against defined targets. In the event of critical issues, members are assigned specific actions according to their responsibility. Security indicators and reporting provided to the bank’s relevant governance forums support appropriate security risk awareness and decision taking. The comprehensive metrics framework maintained by the Chief Security Office is underpinned by an extensive data set allowing for various dedicated views. The Management Board receives a quarterly information security risk posture report, as well as ad hoc information if required. Furthermore, the CSOprovides regular updates on material topics relating to security to the Supervisory Board’s Committee responsible for Technology, Data and Innovation.

| 97 |

| Deutsche Bank      |
| Annual Report 2024 |

Strategy The Chief Security Office develops the bank’s group-wide security strategy and oversees its implementation and operationalization globally via the organizational set-up, governance, and implemented security policies. The security strategy, which is reviewed on a regular basis, incorporates developments in the threat landscape, technology, the regulatory environment, the bank’s corporate and IT strategy, and other internal and external parameters. The approach provides comprehensive and layered security controls. The Chief Security Office works closely with the bank´s divisions to enable alignment with the security by design approach throughout bank wide programs and initiatives. Security investments are prioritized and adjusted by a threat-driven perspective, leveraging the regular review and assessment of the maturity of the bank’s security implementation. A key element of the bank’s security strategy is to foster responsibility and active awareness among Deutsche Bank staff. By embedding these principles into daily practices, Deutsche Bank aims to bring about long-term behavioral changes that help mitigate risks and enhance overall security. The bank’s security culture and awareness campaign, “Mission Security”, communicated to all employees worldwide, reinforces these efforts. Another way the bank strengthens security culture is by periodically conducting simulations and testing exercises, including phishing simulation and mandatory training. Impact, risk, and opportunity management Impacts, risks, and opportunities Clients expect secure access to their bank’s services anytime, anywhere, and through a variety of channels. As part of doing business with the bank, clients entrust Deutsche Bank with sensitive data. Deutsche Bank has the responsibility to preserve the confidentiality, integrity, and availability of clients’, as well as business partners’ data and of its own information assets, including the bank’s employees’ information. Doing so consistently and effectively is essential for retaining the trust of these stakeholders and preserving their interests. Consequently, the bank continues to invest in security risk mitigation. Based on stringent risk management processes, Deutsche Bank adjusts its security capabilities