Company: ADZCF
Filing Date: 2025-03-13
Form Type: 20-F
Source: 0001159508-25-000020
Chunk: 41

Company: DEUTSCHE BANK AKTIENGESELLSCHAFT
Filing Date: 2025-03-13
Form: 20-F
Chunk 41
---
 2024 on Form 20-F |

The bank continually assesses and monitors emerging threats relating to the bank’s operations and information. This comprises identification of and response to incidents along the bank’s supply chain, including third- and fourth-party vendors. Security breaches impacting the bank’s supply chain may not only affect the bank but also may have severe cross-industry consequences. Additionally, Deutsche Bank actively tracks threats which have the potential to exploit security vulnerabilities, and activities by nation-state actors along with trends and developments, such as cyber risks related to artificial intelligence technologies and potential threats that quantum computing poses to encryption. The bank also continues to closely observe common attack scenarios, including ransomware, denial of service, and supply chain attacks. For further details and more information, please refer to the Information Security chapter within the Risk Report. Deutsche Bank is continuously improving its data management strategy focusing on core processes and data sets like transactional, client, and reference data. This includes developing and implementing enterprise architecture principles across its core technology infrastructure. This is central to Deutsche Bank’s wider technology and data strategy, which aims to enable business growth and efficiencies, while also enhancing the control environment. Regulators are actively involved in monitoring the bank's progress in this area. Major technology transformations in the bank’s business and infrastructure areas are executed via dedicated initiatives. These initiatives aim to reduce IT and business costs, improve controls, and drive revenue growth by offering new client features or targeting client growth. However, there are risks in executing these programs, such as, talent and financial constraints, dependencies on other programs and key deliverables, extended implementation timelines or adverse change related impacts activity on the control environment and functionality issues within upgraded applications or their underlying technologies. Deutsche Bank maintains insurance for cyber events. There can be no assurance that such coverage will be adequate to cover all losses or liabilities arising from a cyber event. Risks relating to artificial intelligence could potentially impact or amplify existing risks Deutsche Bank’s faces in its operations. Artificial intelligence (AI) has the potential to amplify existing risk factors across various domains, including technical, security, societal, economic, ethical, regulatory, environmental, and privacy-related risks. These AI related risks could significantly impact the bank’s stakeholders and society at large. If not properly addressed and mitigated, they may lead to a deterioration of Deutsche Bank’s business results through potential legal liabilities, reputational damage, and loss of customer trust. The failure to leverage AI or adopting an overly conservative approach, coupled with stringent or inconsistent regulations across jurisdictions, poses risks of missed opportunities. Additionally,