Company: FITBI
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000035527-25-000079
Chunk: 556

Company: FIFTH THIRD BANCORP
Filing Date: 2025-02-24
Form: 10-K
Item: Item 7
Chunk 556
---
 Association: Stable Stable StableStable

101 Fifth Third Bancorp

Table of Contents MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

OPERATIONAL RISK MANAGEMENT 

Operational risk is the risk to current or projected financial condition and resilience arising from inadequate or failed internal processes or systems, human errors or misconduct or adverse external events that are neither market- nor credit-related. Operational risk is inherent in the Bancorp’s activities and can manifest itself in various ways, including fraudulent acts, business interruptions, inappropriate behavior of employees, unintentional failure to comply with applicable laws and regulations, poor design or delivery of products and services, cybersecurity or physical security incidents and privacy breaches or failure of third parties to perform in accordance with their arrangements. These events could result in financial losses, reputational damage, litigation and regulatory fines or other damage to the Bancorp. The Bancorp’s risk management goal is to keep operational risk at appropriate levels consistent with the Bancorp’s risk appetite, financial strength, the characteristics of its businesses, the markets in which it operates and the competitive and regulatory environment to which it is subject.

To control, monitor and govern operational risk, the Bancorp maintains an overall Enterprise Risk Management Framework which comprises governance oversight, risk assessment, capital measurement, monitoring and reporting as well as a formal three lines of defense approach. ERM is responsible for prescribing the framework to the lines of business and corporate functions and providing independent oversight of its implementation (second line of defense). Business Controls groups are in place in each of the lines of business to ensure consistent implementation and execution of managing day-to-day operational risk (first line of defense).

The Bancorp’s Enterprise Risk Management Framework consists of five integrated components, including identifying, assessing, managing, monitoring and independent governance reporting of risk. The corporate Operational Risk Management function within Enterprise Risk is responsible for developing and overseeing the implementation of the Bancorp’s approach to managing operational risk. This includes providing governance, awareness and training, tools, guidance and oversight to support implementation of key risk programs and systems as they relate to operational risk management. These include programs, such as risk and control self-assessments, product delivery risk assessments, scenario analysis, new product/initiative risk reviews, key risk indicators, Third-Party Risk Management, cybersecurity risk management, review of operational losses and monitoring of significant organizational or process changes. The function is also responsible for developing reports that support the proactive management of operational risk across the enterprise. The lines of business and corporate functions are