Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 323

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 323
---
 informational materials and client events, highlighting information security threats and the bank's protective measures. This also includes response to client inquiries on information security topics through its client relationship function. Deutsche Bank also requires a yearly mandatory information security baseline training for all employees and eligible contractor staff. This training encompasses the content of the information security policy, the process to report security incidents or any other security-related concerns, as well as important and current security threats. To address the latter and to comply with internal standards, the training is updated at least on a yearly basis. For Deutsche Bank employees, failure to complete this training and late completion can result in disciplinary consequences. In 2024, a learning completion rate of 99,65% was achieved for the e-Learning-based mandatory information security training, compared to 99,94% in 2023. Deutsche Bank’s security incident management covers on a day-to-day-basis security events that may affect the bank, its clients and business partners, or employees. The Cyber Threat Operations Centers located in Asia Pacific, Europe and USA support global and group-wide detection of threats and response to incidents 24/7. The related management and reporting processes performed with involvement of subject matter experts, such as divisional Chief Information Security Officers, Compliance, Legal, Group Communications and Group Data Privacy, are designed to enable a quick and effective response to cyberattacks and information security threats. The objective is to minimize the risk of impacts on Deutsche Bank and to use insights gained from incident handling to continuously improve the bank’s processes. As in prior years, Deutsche Bank in 2024 experienced attacks on computer systems, including attacks aimed at obtaining unauthorized access to confidential company or client information, damaging, or interfering with company data, resources, or business activities, or otherwise exploiting vulnerabilities in its infrastructure, including attacks that occurred along the bank’s supply chain. The bank, however, did not experience any material effecton its business strategy, results of operation, or financial condition as the result of an information security incident, including attempted cyber-attacks. Consequently, the bank continues to invest in security risk mitigation. As in previous years, in 2024 Deutsche Bank adapted its security capabilities through several programs across information and physical security. As examples, the bank further strengthened its perimeter security and expanded its comprehensive staff security training offering, including the launch of a security academy.

| 101 |

| Deutsche Bank      |
| Annual Report 2024 |

Risk and capital performance Capital, Leverage Ratio, TLAC and MREL Own Funds The calculation of Deutsche Bank’s own