Company: CIB
Filing Date: 2025-08-15
Form Type: 6-K
Source: 0002058897-25-000035
Chunk: 14

Company: Grupo Cibest S.A.
Filing Date: 2025-08-15
Form: 6-K
Chunk 14
---
 the portfolio has declined due to revaluation factors.

#### OPERATIONAL RISK
Operational risk is the likelihood that Grupo Cibest will incur losses as a result of failures or inadequacies in systems, processes, people, infrastructure, or due to external causes or events. Operational risk may also arise from failures in the models or management information used by the organization.

#### Separated
Grupo Cibest has an operational risk management system, which aims to adequately manage risks to minimize, avoid, or reduce the occurrence of adverse events and/or reduce their consequences or costs if they do occur.

Realized losses during the second quarter of 2025 amounted to COP 70,245 millions.

#### FINANCIAL LEVERAGE RISK

#### Separated
Grupo Cibest monitors its financial structure using the double leverage ratio, a key indicator that reflects the level of indebtedness used to finance investments in subsidiaries. This metric helps assess the risk that the holding company may face financial strain or solvency issues when such investments are primarily funded through debt, creating a two-tier leverage structure:

• At the holding company level, where debt is incurred to invest in subsidiaries.

• At the subsidiary level, where each entity may also carry its own debt.

As of June 2025, the Grupo Cibest’s double leverage ratio stood at 104.8%, based on the book value of investments in subsidiaries of COP 43,885 billion, compared to Grupo Cibest’s accounting equity of COP 41,862 billion.

This level remains within the internal thresholds established by management and is subject to continuous monitoring as part of the Grupo Cibest's financial risk management practices.

#### OTHER RELEVANT RISKS
| 20 |

The analysis presented below for Grupo Cibest Consolidated is based on a comparison with the information reported by Grupo Bancolombia as of March 31, 2025:

#### •

#### Regulatory and Legal Risk
During the second quarter of 2025, relevant regulatory changes were recorded in Colombia, Panama, Guatemala, and El Salvador that could have fiscal, accounting, and operational implications.

#### Colombia
For the second quarter of 2025, significant regulatory movements were registered in Colombia. Firstly, the Congress of the Republic approved the labor reform bill. Although the final version differs from the draft originally submitted by the National Government, it remains one of the administration’s priority initiatives, aimed at reaffirming workers’ rights in areas such as working hours, employment arrangements, and compensation. The direct effects