Company: SHG
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0001193125-25-089950
Chunk: 392

Company: SHINHAN FINANCIAL GROUP CO LTD
Filing Date: 2025-04-23
Form: 20-F
Chunk 392
---
 decisions related thereto, and convenes the Information Protection Committee to effectively address significant risks that could potentially impact our customer services. We regularly conduct vulnerability assessments and black-boxpenetration testing to check for potential external breaches and establish preventive measures. Additionally, we monitor the exposure of sensitive information such as customer data to dark web and deep web and carry out additional preventive activities such as attack surface management, cyber threat intelligence collection, and phishing and pharming detection. 2. Governance. We regularlyreport on cybersecurity risks and operational matters to the board of directors and management. Reports provide a comprehensive overview of various areas, such as ICT risk recognition and assessment, cybersecurity incident response and recovery training, systems change management, incident management processes, and periodic testing. To manage various information security risks, we have appointed a CISO as well as a Chief Privacy Officer (“CPO”), and we have established related organizations. The CISO and CPO oversee the management of our information protection strategy and internal controls by periodically reviewing comprehensive reports on the outcomes of various information protection activities related to cyber security, such as periodic vulnerability inspections, internal control and security monitoring, digital checkup, incident response training, and emergency response training. Based on these reports, the CISO and CPO make informed decisions related to cybersecurity in general. As part of his or her role, the CPO is also appointed as the Credit Information Management Protection Officer as required by domestic regulations. The Credit Information Management Protection Officer is required to provide annual reports related to credit information protection to the board of directors and to submit related reports to governmental agencies.

<div align='center'>282</div>

## ITEM 17.FINANCIAL STATEMENTSWe have responded to Item 18 in lieu of responding to this item.ITEM 18.FINANCIAL STATEMENTSReference is made to Item 19(a) for a list of all financial statements filed as part of this annual report.ITEM 19.EXHIBITS(a)Exhibits filed as part of this Annual Report:See Exhibit Index beginning on page 284 of this annual report.(b)Financial Statements filed as part of this Annual Report:See Index to Financial Statements on pageF-1of this annual report.283
INDEX OF EXHIBITS

| 1.1     |     | Articles of Incorporation, last amended as of March 26, 2025 (in English)†                                                                                                                                                                                                                                                                                                                                                                                                                           |
|:--------|:----|:-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| 2.1