Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 299

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 299
---
 provides a common approach to define the level of risk appetite across the firm and monitor exposure against this appetite. The operational risk profile is regularly monitored against the bank’s defined risk appetite, to alert the organization on impending problems in a timely fashion. In 2024, the concept of residual risk zones was further enhanced by introducing Operating Conditions the 1 stLOD must operate within. This allows for a more precise articulation of risk appetite for a given risk type including defined breach and consequences management requirements. Findings and issue management: The findings and issue management process facilitates mitigating the risks associated with known control weaknesses and deficiencies, and enables management to make risk-based decisions over the need for further remediation or risk acceptance. Outputs from the findings management process must be able to demonstrate to internal and external stakeholders that the bank is actively identifying its control weaknesses and taking steps to manage associated risks within acceptable levels of risk appetite. Framework Adherence: Operational Risk Framework Adherence monitoring is a key activity to oversee, monitor and test the conformity to OR Framework component requirements by key stakeholders in the 1 stand 2 ndLoD. Operational Risk Framework Adherence results aim to proactively identify implementation improvements required of users of the OR Framework and highlight potential Framework design improvements. In 2024 framework adherence consequence management was enhanced whereby material adherence deficiencies identified through framework adherence reviews will result in risk-identified issues against the responsible 1st or 2nd LoD function, unless a finding already exists to appropriately remediate the deficiency identified.

| 84 |

| Deutsche Bank      |
| Annual Report 2024 |

Operational risk type frameworks Operational risk is a risk type on the Group’s Risk Type Taxonomy. Together with Reputational Risk it forms Non-Financial risk. The Operational Risk Management Framework is a set of interrelated tools and processes that are used to identify, assess, measure, monitor and mitigate Deutsche Bank Group’s operational risks according to regulatory and industry-established definition of operational risk. It applies to the operational sub-risk types on a more granular level and enables the bank to aggregate and monitor its operational risk profile. These operational sub-risk types are controlled by various infrastructure functions and include the following: – The Compliance department performs an independent 2nd line control function that protects the bank’s license to operate by promoting and enforcing compliance with the law and driving a culture of compliance and ethical conduct in the bank. The Compliance department assists, reviews and challenges the business divisions and works with other infrastructure functions and regulators to establish and maintain a risk-based approach to the