Company: BBVXF
Filing Date: 2025-03-21
Form Type: 6-K
Source: 0000842180-25-000016
Chunk: 61

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-03-21
Form: 6-K
Chunk 61
---
 approved by the corresponding corporate bodies of each entity. This Appetite Framework is deployed through a structure of management limits consistent with the above.

The corporate risks area works with the various geographical and/or business areas to define their Risk Appetite Framework, so that it is coordinated with, and integrated into, the Group's Risk Appetite Framework, making sure that its profile is in line with the one defined. Moreover, and for the purposes of monitoring at local level, the Chief Risks Officer of the geographical and/or business area regularly reports on the evolution of the metrics of the Local Risk Appetite Framework to the corporate bodies, as well as to the relevant top-level local committees, following a scheme similar to that of the Group, in accordance with its own corporate governance systems.

Within the issuing process of the Risk Appetite Framework, Risk Internal Control carries out, within the scope of the GRM area the effective challenge of the Framework proposal prior to its escalation to corporate bodies, which is also documented, and it is extended to the approval of the management limits under which it is developed, also supervising its adequate approval and extension to the different entities of the Group. Likewise, in each significant geographical area, the local Risk Internal Control unit, working in the Risk Management Committee (hereinafter, RMC), carries out an effective challenge of the local Risk Appetite Framework prior to its escalation to local corporate bodies, which is also documented, and extended to the local approval process of the management limits. The report with the main conclusions of this analysis will be sent to the Heads of GRM and Regulation and Internal Control.

Monitoring of the Risk Appetite Framework and management of breaches

So that corporate bodies can develop the risk functions of the Group, the heads of risks at an executive level will regularly report (more frequently in the case of the CRC, within its scope of responsibility) on the evolution of the metrics of the Risk Appetite Framework of the Group, with the sufficient granularity and detail, in order to check the degree of compliance of the risks strategy set out in the Risk Appetite Framework of the Group approved by the Board of Directors.

If, through the monitoring of the metrics and supervision of the Risk Appetite Framework by the executive areas, a

relevant deviation or breach of the maximum appetite levels of the metrics is identified, that situation must be reported and, where applicable, the corresponding corrective measures must be submitted to the CRC.

After the relevant review by the CRC, the deviation must be reported to the CDP (as part of its role in the