Company: TFC
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0000092230-25-000020
Chunk: 329

Company: TRUIST FINANCIAL CORP
Filing Date: 2025-02-25
Form: 10-K
Item: Item 7A
Chunk 329
---
 - Truist’s success depends on building lasting and mutually beneficial relationships with clients, which involves assessing their financial position and background.

•Level of equity invested in the transaction - in general, borrowers are required to contribute or invest a portion of their own funds prior to any loan advances.

Refer to the “Lending Activities” section in MD&A for a discussion of each loan and lease portfolio.

Liquidity Risk

Liquidity risk is the risk that Truist will be unable, or that market participants may perceive Truist to be unable, to fund increases in its assets and meet its financial obligations at a reasonable cost and in a timely manner. Refer to the “Liquidity” section in MD&A for additional discussion.

Technology Risk

Technology risk is the risk associated with the disruption or failure of technology that negatively impacts business operations. Truist has defined and adopted a technology risk framework that provides the foundation for its technology risk strategy, program, and oversight and defines key objectives, operating model components, risk domains, and capabilities to manage this risk.

Refer to Item 1C, “Cybersecurity” for a discussion regarding Truist’s cybersecurity risk management, strategy, and governance.

Data Analytics, AI, and Generative AI Risks

Data risk is the risk to current or projected financial condition, operations, strategic objectives, and regulatory compliance arising from inadequate data accuracy, completeness, consistency, timeliness, relevance, integrity, and validity (i.e., data fidelity). Inadequate data fidelity can negatively impact regulatory and management reporting, public disclosures, and business decisions.

Truist recognizes the importance of maintaining accurate and reliable data and maintains a formal data risk management program that is designed to mitigate risks related to data fidelity. Through active data risk monitoring and accuracy testing, Truist seeks to provide reasonable assurance over data-related processes, risks, and controls, as well as the quality and retention of key data used for operational, strategic, regulatory, and compliance purposes. Management and the Board provide oversight of the data risk management program and receive regular updates from the RMO.

Truist’s AI program is foundationally based on the National Institute of Standards and Technology AI Risk Management Framework Core, which provides outcomes and actions that enable dialogue, understanding, and activities to manage AI risks and develop trustworthy AI systems.

78   Truist Financial Corporation

Compliance Risk

Compliance risk is the risk of legal or regulatory sanctions, financial loss, or damage to reputation as a result of noncompliance with (i)