Company: CFG-PE
Filing Date: 2025-08-04
Form Type: 10-Q
Source: 0000759944-25-000108
Chunk: 213

Company: CITIZENS FINANCIAL GROUP INC/RI
Filing Date: 2025-08-04
Form: 10-Q
Item: Part I, Item 2
Chunk 213
---
. | 28

The Company regularly reviews the nature of its business activities and modifies the CSP as appropriate. Many of the elements of the CSP are cyber defense related and are in place to reduce our risk to a wide range of potential cyber threats that may target our assets and information daily. The effectiveness of the CSP is assessed and measured periodically by various lines of defense within the Company and is conducted primarily through risk assessments, assurance testing, and an independent audit. External organizations are also routinely engaged to assess our CSP and test our perimeter defenses. The effectiveness of the CSP is reported periodically to the appropriate governance committees. For more information regarding our cybersecurity risk management practices and governance, see Item 1C in our 2024 Form 10-K.

Compliance Risk

Financial institutions are subject to many laws, rules, and regulations at both the federal and state levels. These broad-based laws, rules and regulations include, but are not limited to, expectations relating to anti-money laundering, lending limits, client privacy, fair lending, prohibitions against unfair, deceptive, or abusive acts or practices, protections for military members as they enter active duty, and community reinvestment. Adherence to the increasing volume and complexity of regulatory changes can increase our overall compliance risk. As such, we utilize various resources to help ensure expectations are met, including a team of compliance experts dedicated to ensuring our conformance with all applicable laws, rules, and regulations. Our colleagues receive training for several broad-based laws and regulations including, but not limited to, anti-money laundering and customer privacy. Colleagues engaged in lending activities also receive training for laws and regulations related to flood disaster protection, equal credit opportunity, fair lending, and/or other courses related to the extension of credit. We hold ourselves to a high standard for adherence to compliance management and seek to continuously enhance our performance.

CAPITAL

As a bank and financial holding company, we are subject to regulation and supervision by the FRB. Our banking subsidiary, CBNA, is a national banking association primarily regulated by the OCC. Our regulation and supervision continues to evolve as the legal and regulatory frameworks governing our operations continue to change. See “Regulation and Supervision” in our 2024 Form 10-K for more information.

Capital Adequacy Process

Our assessment of capital adequacy begins with our Board-approved risk appetite and risk management framework. This framework provides for the identification, measurement, and management of material risks. There have been no significant changes to our capital adequacy risk appetite and risk management framework as described in “