Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 56

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 56
---
 as well as remediation requirements, more regulatory or other enforcement proceedings, civil litigation and higher compliance and other risks and costs. The bank is required to monitor, evaluate, and observe laws and other requirements relating to financial and trade sanctions and embargoes set by the EU, the Deutsche Bundesbank, Germany’s Federal Office for Economic Affairs and Export Control, and other authorities, such as the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) and the UK Treasury Department’s Office of Financial Sanctions Implementation (OFSI). Sanctions are subject to rapid change, and it is also possible that new direct or indirect secondary sanctions could be imposed by the United States or other jurisdictions without warning, as a result of geopolitical developments. Should the bank fail to comply timely and in all respects with these sanctions, the bank could be exposed to legal penalties and its reputation could suffer.

| 35 |

| Deutsche Bank                   |
| Annual Report 2024 on Form 20-F |

The bank in particular faces the risk of loss events due to the instability, malfunction or outage of its IT system and IT infrastructure, as well as breaches in IT system and infrastructure (including cyber-attacks). Such losses could materially affect the bank’s ability to perform business processes and may, for example, arise from the erroneous or delayed execution of processes as a result of system outages, degraded services in systems and IT applications or the inaccessibility of its IT systems. A delay in processing a transaction, for example, could result in an operational loss if market conditions worsen during the period after the error. IT-related errors may also result in the mishandling of confidential information, damage to the bank’s computer systems, financial losses, additional costs for repairing systems, reputational damage, customer dissatisfaction or potential regulatory or litigation exposure (including under data protection laws such as the GDPR). Additionally, there is a heightened emphasis and growing expectations of data management and the risks posed by poor data management standards and data quality, and the potential impact to key control, decision-making and reporting processes. The continuing move across global industries to conduct business from home and away from primary office locations is driving a more accelerated evolution of business practices compared to historic trends. The demand on the bank’s technology infrastructure and the risk of cyber-attacks could lead to technology failures, security breaches, unauthorized access, loss or destruction of data or unavailability of services, as well as increase the likelihood of conduct breaches. Business continuity risk is the risk of incurring losses resulting from the interruption of normal