Company: BCS
Filing Date: 2025-02-13
Form Type: 20-F
Source: 0000312069-25-000114
Chunk: 355

Company: BARCLAYS PLC
Filing Date: 2025-02-13
Form: 20-F
Chunk 355
---
 | Financial review | Financialstatements |     | Barclays PLC 2024Annual Report onForm 20-F | 188 |
|                            | Governance             |                                  |     |             |                  |                     |     |                                            |     |
| ESG Governance (continued) |                        |                                  |     |             |                  |                     |     |                                            |     |

mapping of dependencies, planning and testing. Resilience and security is the responsibility of everyone within the Group. All permanent employees are required to complete annual mandatory training on these topics.

| Please refer topage 99for details of Barclays PLC BoardRisk Committee oversight relating to operationalresilience.Please refer to the 'Material existing and emerging risks'section in our Risk review onpages202to203forfurther details on cyberattacks, data management andinformation protection.Please refer to the 'Supervision and regulation' section inour Risk review onpage316for further details on ourregulatory approach to managing such risks. |

Chief Security Office and Chief Information Security Office Barclays' Chief Security Office and Chief Information Security Office exist to keep the bank, its customers, clients, and colleagues safe and secure, and to support the resilience of our operations. They support Barclays' ability to operate in a protected and secure environment, and actively promote a culture of security as everyone's responsibility. The Group Chief Security Officer and Group Chief Information Security Officer (CISO) head Barclays' Chief Security Office and Chief Information Security Office, respectively. The Group Chief Security Office is responsible for physical security, threat intelligence, crisis management, and investigations and liaising with law enforcement, among other areas. Barclays' Group Chief Security Officer combines 10 years of law enforcement experience with over 20 years of experience in senior leadership roles managing security at global financial institutions, and is supported by a leadership team with expertise in threat intelligence, investigations, security transformation, and crisis management, as well as other teams of subject matter experts and analysts. In 2024, Barclays’ Group CISO was elevated to report directly to the Group Chief Information Officer (a member of the Group Executive Committee ), to leverage the strategic and operational benefits of aligning cybersecurity and technology. The Group Chief Information Officer reports to the Chief Operating Officer, and also sits on the Group Executive Committee. Barclays’ Group CISO is responsible for assessing and managing Barclays’ material risks from cybersecurity threats. The Group CISO is responsible for areas that, among others, include cybersecurity operations; internal penetration testing; third-party security management; cryptography; vulnerability management; governance, risk,