Company: HBAN
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0000049196-25-000020
Chunk: 224

Company: HUNTINGTON BANCSHARES INC /MD/
Filing Date: 2025-02-14
Form: 10-K
Item: Item 7
Chunk 224
---
 to plan and execute on its own goals. To this end we employ a set of defense in-depth strategies, which include efforts to make us less attractive as a target and less vulnerable to threats, while investing in threat analytic capabilities for rapid detection and response. Potential concerns related to cybersecurity may be escalated to our board-level ROC and/or Technology Committee, as appropriate. 

As a complement to the overall cybersecurity risk management, we use a number of internal training methods, both formally through mandatory courses and informally through written communications and other updates, to ensure awareness of the risks of cybersecurity threats at all levels across the organization. Internal policies and procedures have been implemented to encourage the reporting of potential phishing attacks or other security risks. We also use third-party services to test the effectiveness of our cybersecurity risk management framework, and any such third parties are required to comply with our policies regarding information security and confidentiality.

Compliance Risk

Financial institutions are subject to many laws, rules, and regulations at both the federal and state levels. These broad-based laws, rules, and regulations include, but are not limited to, expectations relating to anti-money laundering, lending limits, client privacy, fair lending, prohibitions against unfair, deceptive, or abusive acts or practices, protections for military members as they enter active duty, and community reinvestment. The volume and complexity of recent regulatory changes have increased our overall compliance risk. As such, we utilize various resources to help ensure expectations are met, including a team of compliance experts dedicated to ensuring our conformance with all applicable laws, rules, and regulations. Our colleagues receive training for several broad-based laws and regulations including, but not limited to, anti-money laundering and customer privacy. Additionally, colleagues engaged in lending activities receive training for laws and regulations related to flood disaster protection, equal credit opportunity, fair lending, and/or other courses related to the extension of credit. We hold ourselves to a high standard for adherence to compliance management and seek to continuously enhance our performance.

CAPITAL

(This section should be read in conjunction with the “Regulatory Matters” section included in Part I, Item 1: Business and Note 22 - “Other Regulatory Matters” of the Notes to Consolidated Financial Statements.)

Our primary capital objective is to maintain appropriate levels of capital within our Board-approved risk appetite to support the Bank's operations, absorb unanticipated losses and declines in asset values, and provide protection to uninsured depositors and debt holders in the event of liquidation, while also funding organic growth and providing appropriate returns to our shareholders. Both regulatory capital and shareholders