Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 333

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 16
Chunk 333
---
2024 | Bradesco  

  Table of Contents  

16. K.60 Governance

The approach adopted for
cybersecurity risk governance is formalized through internal standards and is in line with the directives of our Regulators and Market
frameworks, as is disclosed to the market through our investor relations website.

This integrated structure
aims to ensure governance compatible with our size, risk profile and business model, ensuring that IT’s critical assets and infrastructure
are able to withstand cyberattacks.

As described in “ Item
4. B.20.03 Internal controls”, acts proactively in the management of risks and controls existing in the processes to keep them at
acceptable levels. In addition, annually, a report is sent to the Board of Directors and to the Audit Committee (COAUD), consolidating
the evaluations and conclusions of the work carried out by the Internal Controls area. The activities of the Internal Controls area are
performed by trained professionals, through well-defined processes and technology compatible with our size and structure, complexity of
the products and services negotiated, risk profile and business model, pursuant to CMN Resolution No. 4,968/21, as amended. This model
also includes cybersecurity risks.

We maintain a set of controls,
represented by procedures, processes, organizational structures, policies, IT standards and solutions capable of meeting the protection
principles regarding the confidentiality, availability and integrity of information.

Regarding the Cybersecurity
governance structure, the theme is managed by two departments:Corporate Security Department and IT Infrastructure Department (DITI),
with the involvement of several areas of the our Group, which have specific tasks, with the aim of ensuring an efficient structure in
risk control and mitigation, allowing risks to be identified, measured, treated and communicated, contributing to the achievement of
strategic objectives.

16. K.70 Corporate Security
Area

Our Corporate Security Area’s
mission is to promote security solutions by creating, implementing and maintaining and updating rules and processes aligned with our business.

It operates strategically
in the areas of Information Security and Cybersecurity, Access Management, Privacy and Data Protection, Prevention of Electronic, Debit/Credit
Card and Documentary frauds, and Prevention of Physical and Property Security frauds. It also works in the specification of systemic solutions
and security processes in electronic channels and information systems, evaluating, treating and proposing improvements. In addition, the
department is responsible for delivering Technical Opinions on strategic security issues and the implementation of products, services,
processes and AML