Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 104

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 4
Chunk 104
---
 NBR ISO 22,301, which defines Business Continuity as “the Group’s ability to continue to deliver products or services at a previously defined acceptable level following the occurrence of an interruption incident”.
 The procedures adopted after an interruption incident, and which aim to guarantee the acceptable operational level of critical business processes – internal or outsourced – are contained in a Business Continuity Plan (BCP) or in a defined continuity strategy, which seek to resume activities and minimize possible impacts on our clients.
 The organizational and governance structure established for Business Continuity includes corporate policies and standards which define roles and responsibilities and aim to ensure that the plans and strategies employed are up-to-date and efficient, by requiring periodic tests and exercises to be carried out within the business units. These policies also consider the critical processes carried out by service providers considered Relevant Suppliers.
 These policies and internal rules are in line with the regulations of the Central Bank of Brazil and recommendations of the Basel Committee on Banking Supervision. The Business Continuity Management process is under the responsibility of the Compliance and Non-Financial Risk Management, in its BCM sector.
 
4.B.20.01-10 Corporate crisis management
 We define incident and crisis as follows:
 
·   Incident: momentary event, of low complexity and with possible repercussion to stakeholders. The
                incident, depending on severity, is classified as relevant or critical.             
----------------------------------------------------------------------------------------------------

·                      Crisis: it is the occurrence of an extremely adverse event (or combination of events), rare, unstable                    
    and complex that may result in a deterioration of relationship with stakeholders as well as pose a potential threat to strategic objectives,
                                                         reputation or even our existence.                                                      
------------------------------------------------------------------------------------------------------------------------------------------------
 The corporate crisis management process helps to ensure that any signs of crisis are timely identified, evaluated and classified according to their severity, so that actions can be promptly taken to reestablish the normal course of activities and strengthen our operational resilience.
 The corporate crisis management process consists of the following steps:
 
·   Prevention: Identify vulnerabilities and develop scenarios that could result in an incident and/or
                                                a crisis;                                             
------------------------------------------------------------------------------------------------------

·   Preparation: Develop incident and/or crisis response plans and conduct training;
------------------------------------------------------------------------------------

·   Response: Trigger incident and crisis management process and execute response plans; and
--------------------------------------------------------------------------------------------

·   Recovery: Identify opportunities to improve incident and crisis management processes and plans.
---------------------------------------------------------------------------------------------------
 In order to help judge the severity of an incident and/or a crisis, we have established levels of impact that determine the optimization of resources and the necessary steps to