Company: BBVXF
Filing Date: 2025-02-21
Form Type: 20-F
Source: 0000842180-25-000010
Chunk: 251

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-02-21
Form: 20-F
Item: Item 6
Chunk 251
---
 plans in matters of technology and technological infrastructure.
•Be informed, as appropriate, of:
a.Compliance risks associated with information technologies; and
b.Procedures established to identify, assess, oversee, manage and mitigate these risks.
•Be informed of any relevant events that may have occurred with regard to cybersecurity, i.e. events that, either in isolation or as a whole, may cause significant impact or harm to the Group’s equity, results or reputation. In any case, such events will be communicated, as soon as they are identified, to the Chair of the Committee.
•Be informed, with the frequency required by the head of the Technological Security area, of the activities carried out thereby, as well as of any incidents that may arise.
- Monitoring the Technology Strategy:
•Be informed, as appropriate, of the technology strategy and trends that may affect the Group’s strategic plans, including the monitoring of general industry trends.
•Be informed, as appropriate, of the metrics established by the Group for the management and control in the technological field, including the Group’s developments and investments in this field.
•Be informed, as appropriate, of matters related to new technologies, applications, information systems and best practices that may affect the Group’s technology strategy or plans.
•Be informed, as appropriate, of the main policies, strategic projects and plans defined by the Engineering area.
•Report to the Board of Directors and, where appropriate, to the Executive Committee, on information technology-related matters falling within its remit. 
For a better performance of its functions, appropriate coordination systems will be established between the Technology and Cybersecurity Committee and the Audit Committee to facilitate:
•That the Committee is aware of the conclusions of the work carried out by the Internal Audit area in technology and cybersecurity matters.
•That the Audit Committee is informed of the information technology related systems and processes that are related to or affect the Group’s internal control systems and other matters within its remit.
The Committee will meet whenever it is convened by its Chair, who is empowered to call the Committee meetings and to set their agenda. The Committee will endeavor to establish an annual calendar of meetings, considering the amount of time to be devoted to its different tasks. In 2024, it held seven (7) meetings.
D. Employees
As of December 31, 2024, we had 125,916 employees. Approximately 99.6% of our employees in Spain held technical, managerial and executive positions, while the remainder were clerical and support staff. The table below sets