Company: SHG
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0001193125-25-089950
Chunk: 155

Company: SHINHAN FINANCIAL GROUP CO LTD
Filing Date: 2025-04-23
Form: 20-F
Chunk 155
---
 and qualitative monitoring and consequence analysis, and upon the occurrence of any such contingency, is required to respond according to a prescribed contingency plan. At the holding company level, we maintain and install a crisis detection and response system which is applied consistently group-wide, and upon the occurrence of an “imminent crisis” or “crisis” event at a subsidiary level, we directly take charge of the situation at the holding company level so that we manage it on a concerted group-wide basis. |

Organization Our risk management system is organized along the following hierarchy (from top to bottom): at the holding company level, the Group Risk Management Committee, the Group Risk Management Council, the Group Chief Risk Officer and the Group Risk Management Team, and at the subsidiary level, the Risk Management Committee, the Chief Risk Officer and the Risk Management Team of the relevant subsidiary. The Group Risk Management Committee, which is under the supervision of our holding company’s board of directors, sets the basic group-wide risk management policies and strategies. Our Group Chief Risk Officer reports to the Group Risk Management Committee, and the Group Risk Management Council coordinates the risk management policies and strategies at the group level as well as at the subsidiary level among each of our subsidiaries. Each of our subsidiaries also has a separate Risk Management Committee, Risk Management Working Committee and Risk Management Team, whose tasks are to implement the group-wide risk management policies and strategies at the subsidiary level as well as to set risk management policies and strategies specific to such subsidiary in line with the group-wide guidelines. We also have the Group Risk Management Team, which supports our Chief Risk Officer in his or her risk management and supervisory role. In order to maintain the group-wide risk at an appropriate level, we use a hierarchical risk limit system under which the Group Risk Management Committee assigns reasonable risk limits for the entire group and each of our subsidiaries, and the Risk Management Committee and the Risk Management Working Committee of each of our subsidiaries manage the subsidiary-specific risks by establishing and managing risk limits in more detail by type of risk and type of product for each department and division within such subsidiary. Further details follow. At the holding company level:

| • |     | Group Risk Management Committee — The Group Risk Management Committee consists of three outside directors of our holding company. The Group Risk Management Committee convenes at least |

107

| quarterly and on an ad hoc basis as needed. Specifically, the Group Risk Management Committee does the following: (i) establish the overall risk management policies consistent with management strategies, (ii) set reasonable risk limits for the entire group and