Company: BBD
Filing Date: 2025-03-31
Form Type: 20-F
Source: 0001292814-25-001244
Chunk: 337

Company: BANK BRADESCO
Filing Date: 2025-03-31
Form: 20-F
Item: Item 16
Chunk 337
---
 fraud, supported by statistical methodologies and predictive models of fraud, with the objective to ensure controls are aligned to
the business. The area also diagnoses losses to identify systemic and operational weaknesses, recommending preventive actions to achieve
alignment with the current strategy;

• The projects and processes area establishes controls to identify risks and is responsible for evaluating
the risk of fraud and issuing recommendations for new projects, processes and products. The area proposes solutions that aim to balance
use and security of products and access to service channels to business and technical area managers, as well as corporate and strategic
preventive actions that follow the best practices of the market; and

• The portfolio analysis area is responsible for managing and communicating
information received from the fraud prevention area to our other areas.

  237 – Form 20-F 2024 | Bradesco  

  Table of Contents  

16. K.80 IT Infrastructure
Department (DITI):

DITI has as its mission
to manage IT infrastructure projects and software infrastructure on the Mainframe Platform and Open Platform, whether on-site or in cloud
environments; provide security of technological infrastructure, ensure connectivity, availability and resilience through technological
evolution; and providing technical support of equipment and software of our workstations and Telecommunication services.

IT Security is one of the
areas of DITI, responsible for processes, resources and solutions aimed at protecting and monitoring our technological infrastructure
against intrusion attempts, improper access, information evasion and malicious code and its main attributions are:

•Secure Systems Development: identify and define best security practices to be adopted in programming, according to the coding languages we use, performing tests of vulnerabilities in static and/or dynamic applications, during the development cycle, according to security rules and policies;

•Technical Security Architecture: define and manage the technical security reference architectures
for the entire Group through controls with reusable components, supporting and overseeing the application of security controls in technological
solutions aiming at balance between opportunity and risk;

•Security of Technological Platforms: define, manage and coordinate compliance with best practices
for configuring and protecting platforms (operating systems, application servers, database servers, mobile and fixed devices), also fixing
issues in an agile and orchestrated way in case of incidents;

•Network Security: develop and apply reference models/technical security requirements for networks,
electronic communication channels and voice, ensuring the adoption of security standards and technical protection requirements;

•Vulnerability Management: manage the life-cycle of vulnerabilities identified in our technology
assets, monitor action plans with those responsible for mitigations