Company: AEGOF
Filing Date: 2025-05-16
Form Type: 6-K
Source: 0001193125-25-121236
Chunk: 27

Company: AEGON LTD.
Filing Date: 2025-05-16
Form: 6-K
Chunk 27
---
 is described in section B.4.2 . The Internal Audit Function and Actuarial Function are described in section B.5 and section B.6 respectively. General principles of Aegon’s internal control system The general principles of Aegon’s internal control system apply to all undertakings, functional areas or departments. These principles are as follows:

| • |     | All employees must comply with the Code of Conduct. The Code of Conduct states that all employees will conduct their work in an ethical manner; |

| • |     | If employees become aware of, or observe fraud, questionable accounting practices, or other unethical behavior, they should report it to a member of management, human resources or to Aegon Speak Up helpline; |

| • |     | Employees are instructed regarding the sensitivity and confidentiality of the Group and client information; |

| • |     | All departments have developed a system of internal control to ensure that the assets and records of the Group are adequately protected from loss, theft, alteration or unauthorized access; |

| • |     | Records of the Group are maintained in compliance with record retention policies and local regulatory requirements; |

| 23 |     | | Aegon Financial Condition Report 2024 |

| Governance structure  Internal controls |

| • |     | All departments embed and maintain adequate segregation of duties. Where adequate segregation cannot be achieved, other risk mitigating controls are designed, implemented, performed and results are documented; |

| • |     | All departments have business continuity plans in place that are periodically updated; and |

| • |     | The interest of the customer is considered when designing, approving and reviewing products and distribution channels (in line with Aegon’s market conduct principles). |

ORM framework A key element of Aegon’s internal control system is to facilitate action planning and embed continuous improvement regarding the internal control environment throughout the organization. The Operational Risk Management (ORM) framework is considered an integral part of the internal control system to facilitate its compliance with applicable laws, regulation and administrative processes and the effectiveness and efficiency of operations in view of its objectives. The ORM framework is part of the more comprehensive ERM Framework. The ORM function applies building blocks of the ERM framework. A Risk (Self) Assessment (RSA) is achieved through periodic risk control self-assessments. These are performed to understand business objectives, identify operational risks for realizing these objectives, assess the adequacy of the risk mitigating factors or controls in place given the identified risks, and assess