Company: CIB
Filing Date: 2025-08-15
Form Type: 6-K
Source: 0002058897-25-000035
Chunk: 23

Company: Grupo Cibest S.A.
Filing Date: 2025-08-15
Form: 6-K
Chunk 23
---
, applicable from the second semester. The automation of the validation process was significantly expanded by incorporating additional quantitative modules focused on provisioning and liquidity risk models, with a 30% reduction in average review times compared to the usual standard and strengthening the complete traceability of the process. In addition, an early warning engine was successfully implemented to anticipate deadlines of findings and action plans derived from the independent validation of models, generating proactive alerts aimed at reducing the average time to close. These advances allow the risk profile to be maintained at a moderate level with a stable trend in the face of changes in the environment and in the processes of the Grupo Cibest Consolidated.

| 26 |

#### •

#### Cybersecurity and information security risk
As Grupo Cibest Consolidated its business model leveraged on emerging technologies, it is increasingly facing more relevant challenges and risks in terms of cybersecurity and information security. This exposure can generate impacts on the operation of the business, reputational damage or even fraudulent events.

So far in the second quarter of 2025, the construction, disclosure and approval of the technological and cyber risk management policy is highlighted, which will provide a more structured governance and action framework for the identification, measurement, control and monitoring of risk, guaranteeing the confidentiality, integrity and availability of information assets. technology and processes; in addition, it promotes and leverages competitive advantages that enable business objectives.

#### •

#### Internal Fraud Risk
At Grupo Cibest Consolidated we have declared zero tolerance against fraud in any of its manifestations. To this end, we have an anti-fraud program which seeks to promote an adequate internal control environment with mechanisms to prevent, detect and respond to internal fraud risks in an articulated manner between the different areas involved.

This program is the umbrella in the consolidated Grupo Cibest Consolidated for the management of the risks of fraud in financial reporting, misappropriation of assets and corruption.

#### •

#### Risk of FTAs and corruption
n the field of money laundering and terrorist financing (FTA) risk management, with the start-up of Grupo Cibest., a risk prevention and management program was adopted, in accordance with applicable regulations, as well as the adoption of national and international standards in the matter, which allow us to: identify, assess and appropriately manage the LAFT risks to which the entity could be exposed.

Compliance risks in our subordinates continue to be managed with a strategic, comprehensive and adaptable vision, guaranteeing a structured and dynamic development that respects the particularities of each business unit, region and entity.