Risk and Capital Management Report 3Q2015

Similar documents
Risk and Capital Management Report 4Q2015

Risk Management Pillar

Risk Management Pillar 3. Risk Management. Pillar 3. 3 rd Quarter of Itaú Unibanco

Risk and Capital Management Pillar 3

Risk and Capital Management Pillar 3

Credit Risk Management Santander Brazil

Bank of America Merrill Lynch Banco Múltiplo S.A. Pillar 3 Disclosures. December 2017

Pillar III Disclosure

Fubon Bank (Hong Kong) Limited. Pillar 3 Regulatory Disclosures

Disclosure Prudential Disclosure Report. 12/31/2016 Derayah Financial

Pillar 3 Disclosures for the year ending 31 December 2015

Disclosure Prudential Disclosure Report. 12/31/2017 Derayah Financial

(A free translation of the original in Portuguese)

Quarterly Information - ITR Banco ABC Brasil S.A.

Community Trust Company Basel III Pillar 3 Disclosures December 31, 2017

Community Trust Company Basel III Pillar 3 Disclosures March 31, 2017

Report on Internal Control

Banco Votorantim S.A. Consolidated Financial Statements in IFRS December 31, 2018

Basel III Pillar III DISCLOSURES REPORT

Audited Financial Statements Banco ABC Brasil S.A. June 30, 2017 and 2016 with Independent Auditor s Report

Community Trust Company Basel III Pillar 3 Disclosures June 30, 2018

Message from the CEO

Banco Safra S.A. and its Subsidiaries Condensed Consolidated Financial Statements for the Years Ended December 31, 2003 and 2002 and Report of

Modelos de Escoragem de Crédito Pessoa Física th QUARTER. Risk Management Report

Bank of China (Malaysia) Berhad Risk Weighted Capital Adequacy Framework (Basel II) Disclosure Requirements (Pillar 3) 30 June 2014

March 31, 2018 Consolidated Financial Statements

September 30, 2017 Consolidated Financial Statements

CANADIAN TIRE BANK. BASEL III PILLAR 3 DISCLOSURES As at December 31, 2016 (unaudited)

Basel Pillar 3 Disclosures

Management Discussion & Analysis and Complete Financial Statements 1Q18. Itaú Unibanco Holding S.A.

1. Scope of Application

financial report 1 st quarter of 2012 Itaú Unibanco Holding S.A. Management Discussion & Analysis and Complete Financial Statements

Basel III Pillar 3 Disclosures

3. CAPITAL ADEQUACY 3.1. REGULATORY FRAMEWORK 3.2. OWN FUNDS AND CAPITAL ADEQUACY ON 31 DECEMBER 2017 AND 2016

Regulatory Disclosures March 31, 2018

African Bank Holdings Limited and African Bank Limited

Pillar 3 Disclosure. Sumitomo Mitsui Trust Bank (Thai) Public Company Limited. March 31 st, Pillar 3 Disclosures 31 March 2018

KRUNG THAI BANK PUBLIC COMPANY LIMITED

Bridgewater Bank Regulatory Disclosures December 31, 2017

CANADIAN TIRE BANK. BASEL PILLAR 3 DISCLOSURES June 30, 2013 (unaudited)

Bridgewater Bank Regulatory Disclosures March 31, 2017

African Bank Holdings Limited and African Bank Limited

Financial Statements Prudential Conglomerate. 1 st half Financial Statements. Prudential Conglomerate

Pillar 3 Disclosures. GAIN Capital UK Limited

June Consolidated Prudential Conglomerate Financial Statements

ZAG BANK BASEL PILLAR 3 DISCLOSURES. December 31, 2015

National Australia Bank Limited, Mumbai Branch (Incorporated in Australia with limited liability)

Banco do Brasil S.A. Financial statements (in thousands of reais) BB-Consolidated

UBS AG, Mumbai Branch (Scheduled Commercial Bank) (Incorporated in Switzerland with limited liability)

Rogers Bank Basel III Pillar 3 Disclosures

UBS AG, Mumbai Branch (Scheduled Commercial Bank) (Incorporated in Switzerland with limited liability)

Bridgewater Bank Regulatory Disclosures March 31, 2015

Management Discussion & Analysis and Complete Financial Statements 4Q17. Itaú Unibanco Holding S.A.

Bridgewater Bank Regulatory Disclosures March 31, 2016

Samba Financial Group Basel III - Pillar 3 Disclosure Report. September 2017 PUBLIC

HSBC Bank Brasil S.A. - Banco Múltiplo

December December 2016

African Bank Holdings Limited and African Bank Limited. Annual Public Pillar III Disclosures

Banco do Brasil S.A. - MD&A 4Q17

CORPORATE RISK MANAGEMENT POLICY

PRESS RELEASE 2nd quarter 2018

INDIA INTERNATIONAL BANK (MALAYSIA) BERHAD ( D)

ZAG BANK BASEL PILLAR 3 AND OTHER REGULATORY DISCLOSURES. December 31, 2017

TD BANK INTERNATIONAL S.A.

BANK ISLAM MALAYSIA BERHAD PILLAR 3 DISCLOSURE AS AT 31 DECEMBER 2014

African Bank Holdings Limited and African Bank Limited

Consolidated Financial Statements. 3 rd quarter Financial Statements

RISK MANAGEMENT AND RISK FACTORS*

Earnings Release 3Q16. Earnings Release 3Q16. Page 1 of 21

Basel III Reforms. Strategic Initiatives of the Risk Management Implementation in Risk and its Management Profiles

Advisory Guidelines of the Financial Supervision Authority. Requirements to the internal capital adequacy assessment process

DISCLOSURES UNDER PILLAR-3-MARKET DISCIPLINE OF BASEL-III- CAPITAL REGULATIONS FOR THE QUARTER ENDED JUNE 30, 2018

CANADIAN TIRE BANK. BASEL PILLAR 3 DISCLOSURES December 31, 2015 (unaudited)

Banco do Brasil S.A. - MD&A 4Q16

Industrial and Commercial Bank of China (Malaysia) Berhad (Company No M) (Incorporated in Malaysia)

PILLAR 3 REPORT FOR THE THE FINANCIAL YE Y AR

INDIA INTERNATIONAL BANK (MALAYSIA) BERHAD ( D) RISK WEIGHTED CAPITAL ADEQUACY (BASEL II)

OPTIMISTIC. Operational Review. Sub Contents. 148 Risk Management 234 Human Resources 244 Information Technology 249 Operations

Pillar III Disclosures. 31 December 2010

BASEL II - PILLAR III

Earnings Presentation

INDIA INTERNATIONAL BANK (MALAYSIA) BERHAD ( D)

General Bank of Canada

Bridgewater Bank Regulatory Disclosures June 30, 2014

2Q17 RISK MANAGEMENT 2Q17

Amex Bank of Canada. Basel III Pillar III Disclosures December 31, AXP Internal Page 1 of 15

financial report December 31, 2012 Itaú Unibanco Holding S.A. Management Discussion & Analysis and Complete Financial Statements

CHINA CONSTRUCTION BANK (ASIA) CORPORATION LIMITED. Regulatory Disclosures For the year ended 31 December 2017 (Unaudited)

Message from the CEO

HSBC Bank Brasil S.A. - Banco Múltiplo

Market Risk Disclosures For the Quarter Ended March 31, 2013

Botswana Building Society Basel II Pillar III disclosure for the year ended 31 March 2017

Banco Votorantim S.A.

Rogers Bank Basel III Pillar 3 Disclosures

Banco do Brasil S.A. - MD&A 2Q18

Introduction. Scope of Application

THE INVESTOR FOR SECURITIES COMPANY. PILLAR III DISCLOSURE As of 31 December 2017

Financial Statements Banco UBS Pactual S.A. and Subsidiaries. June 30, 2009 and 2008 with Report of Independent Auditors

HSBC Bank Brasil S.A. - Banco Múltiplo

SEPTEMBER 2014 INCORPORATING THE REQUIREMENTS OF THE RESERVE BANK OF INDIA

Transcription:

Risk and Capital Management Report 3Q2015.

Table of Contents A. Introduction...3 B. Balance Sheet Consolidation and Comparison Scope...4 C. Internal Governance...7 1. Governance Structure of Committees...7 2. Organizational Structure...10 3. Policies, Standards, Procedures and Manuals...10 4. Structured Flow of Information...10 D. Capital management... 11 1. Capital Adequacy (Regulatory view)...11 1.1 Basel III...12 1.2 Available Capital (Total Capital, Tier 1 Capital and Common Equity Tier 1 Capital)...12 1.3 RiskWeighted Assets...13 1.3.1 RiskWeighted Assets for Credit Risk (RWA CPAD )...14 1.3.2 RiskWeighted Assets for Market Risk (RWA MPAD )...14 1.3.3 Riskweighted assets for Operational risk (RWA OPAD )...16 1.3.4 Capital Adequacy Analysis (Regulatory View)...16 2. Internal Capital Adequacy Assessment Process ICAAP...17 E. Risk management... 18 1. Credit Risk...18 1.1 Definition...18 1.2 Basic Principles...18 1.3 Risk management structure and involved areas...19 1.3.1 Board of Risks structure Involved areas...19 1.3.2 Credit Lending Structure and Involved Areas...20 1.3.3 Board of Internal Controls and Operational Risks structure Involved Areas...20 1.4 Credit Risk Management...20 1.4.1 Total and Average Exposure in the Quarter...21 1.4.2 Exposure by Country and Brazil Geographical Region...21 1.4.3 Exposure by Economic Sector...22 1.4.4 Credit Concentration...23 1.4.5 Unelapsed period of operations...23 1.4.6 Operations overdue...24 1.4.7 Allowance for loan losses...25 1.5 Credit Risk Mitigation...25 1.6 Counterparty Credit Risk...27 1.6.1 Counterparty Credit Risk Management...27 1.6.2 Credit Derivatives...28 1.7 Acquisition, sale and transfer of financial assets...28 1.7.1 Exposures granted...29 1.7.2 Exposures Acquired...30 1.8 Securitization...30 2 Market Risk...31 2.1 Definitions...31 2.2 Basic Principles...31 2.3 Areas Involved...31 2.4 Market Risk Management...32 1

2.4.1 Segregation of Portfolios...32 2.4.2 Risk Measures and Limits for Management and Control...32 2.4.3 Risk Measurement Methodology...33 2.4.3.1 Trading portfolio...33 2.4.3.2 Banking portfolio...33 2.4.4 Measurement Systems and Communication Process...34 2.4.5 Reporting Limits Exceeded or Noncompliant Transactions...34 2.4.6 Derivative portfolio Profile...34 2.4.7 Sensitivity Analyses...36 3 Liquidity Risk...38 3.1 Definition...38 3.2 Basic Principles...38 3.3 Management and control governance and commissions...38 3.4 Areas Involved...39 3.5 Liquidity Risk Management...39 3.5.1 Risk Measures and Limits for Management and Control...39 3.5.2 Measurement Systems and Communication Process...40 3.5.3 Notifying Limits Exceeded and Contingency Plan...40 4 Operational Risk...41 4.1 Definition...41 4.2 Basic Principles...41 4.3 Areas Involved...41 4.4 Measurement System and Communication Process...42 4.5 Operating Losses by Category of risk...42 4.6 Business Continuity Management...43 5 Equity Risk...44 6 Other risks...45 6.1 Reputation risk...45 6.2 Strategy risk...45 6.3 Environmental and Social Risk...45 6.4 Underwriting risk...45 6.5 Model Risk...45 6.6 Risks Appetite...45 F. Attachments... 46 1. Composition of Total Capital (TC) Appendix 1...46 2. Main Characteristics of the Capital Instruments Appendix 2...49 G. Glossary... 50 2

A. Introduction This document presents information referring to risk management, to the determination of the sum of riskweighted assets (RWA) and to the adequacy of the capital of the Votorantim Prudential Bank, in accordance with the demands of the Brazilian Central Bank ( BACEN ), through Circular No. 3,678 and Circular No. 3,716, and in accordance with Pillar 3 rules of the Basel II Accord. In accordance with CMN Resolutions 3,380, 3,464, 3,721, 4,090 and 3,988, the Bank has institutional structures and policies for the management of operational risk, market risk, credit risk, liquidity risk and capital management approved by the Board of Directors and the basic principles observed in the management and control were established in compliance with the current regulations and market practices, as detailed in the specific chapters on each one of these topics to be presented in this report. The Bank also declares that it has a formal policy for disclosure of information about risk and capital management approved by the Board of Directors, as provided for in Art 12 of CMN Resolution No. 4,193. In addition, according to BACEN Circular No. 3,678, the information contained in this report is responsibility of the Director appointed under the terms of art 14 of Resolution No. 4,193. Banco Votorantim has a portfolio of products and services, classified internally in Wholesale and Consumer Finance. The Wholesale segment is geared towards companies with annual revenues above R$ 200 million, and seeks a position as an important partner of clients through an efficiency, longterm relationship, focusing on integrated financial solutions offering structured products. In Consumer Finance, the Bank is one of the market leaders in consumer finance, focusing on the auto business and positions in other supplementary business lines such as credit cards, insurance brokerage and payroll loans. The following is a summary of the main capital adequacy indicators in the Regulatory View for base date September 2015. The Bank ended Sep15 with a Total Capital of approximately R$ 10,9 billion, presenting an decrease of R$ 101 million (0.9%) over the previous quarter, mainly due to increased deductions of equity adjustments and reduction of Shareholders' Equity. The total sum of RiskWeighted Assets (RWA) ended Sep 15 at approximately R$ 75,4 billion, increase of R$ 1,6 billion relative to previous quarter (2.3%), impacted mainly by the increased in Credit Risk (RWA CPAD ). Capital Adequacy (Regulatory view) R$ million. Prudential Sep15 Total Capital (TC) (a) 10.866 Tier I Capital (b) 6.828 Common Equity Tier I (CET1) (c) 6.828 Total RiskWeighted Assets (RWA) (d) 75.460 Credit Risk (RWA CPAD ) 67.386 Market Risk (RWA MPAD ) 3.294 Operational Risk (RWA OPAD ) 4.780 Capital Requirement (e) 8.300 Margin Capital (a e) 2.566 RBAN (f) 494 Margin Capital with RBAN (a e f) 2.072 The Capital Ratio ended Sep15 at 14.4%, with a capital margin of R$ 2,1 billion, calculated by the difference between the Capital and the Capital Requirement. There was a decrease of 46 bps over the prior quarter. Ratios Prudential Sep15 Basel Ratio (a / d) 14.4% Tier I Capital Ratio (b / d) 9.0% Common Equity Tier 1 Ratio (c / d) 9.0% Detailed information about risk and capital management is described throughout this report and spreadsheets to support tables, Annex 1 and Annex 2 available in the Investor Relations site at: www.bancovotorantim.com.br/ir 3

B. Balance Sheet Consolidation and Comparison Scope Risk and capital management is performed for the consolidated prudential according to recommendations published by the Brazilian Central Bank (BACEN). In this context, the table below lists the companies included in the Balance Sheet (published in " Statements" report available on the investor relations website) and the Regulatory balance (Prudential Conglomerate Document 4060 BACEN), which is used to calculate the Capital Ratio. R$ million. Company Business Segment Total Assets Sep15 Shareholders' Equity Balance Sheet Regulatory Balance Sheet Banco Votorantim S/A. Multiple Bank. 103,692 7,641 BV Financeira S.A. Crédito, Financiamento e Investimento. Credit society, financing and investment. 43,851 1,189 BV Leasing Arrendamento Mercantil S/A. Leasing company. 18,286 961 Votorantim Corretora de Títulos e Valores Mobiliários LTDA. Securities Brokerage. 475 265 Votorantim Asset Management Distribuidora de Títulos e Valores Mobiliários LTDA. Distributor Company Securities. 174 77 Votorantim Bank Limited. Foreign Institution. 18 18 Banco Votorantim Securities Inc. Foreign Institution. 53 48 Votorantim Securities (UK) Limited. Foreign Institution. 27 26 FIP BVIA Investment Fund and Participation 931 902 We present below a comparison between the Balance Sheet and the Regulatory Balance Sheet, whose main objective is to highlight the equity elements that constitute the determination of Capital, according to rules established by CMN Resolution No. 4,192. Chapter F discloses the breakdown of capital through a standardized model made available by BACEN Circular No. 3,678. 4

Assets Comparison between Balance Sheet and Regulatory Balance Sheet Sep15. Assets Balance Sheet Prudential, R$ million. Ref. to Regulatory Balance Sheet 1 Comments Annex 1 1. Current Assets and LongTerm Assets 109,775 109,775 1.1. Cash and cash equivalents 224 224 1.2. Interbank funds applied 16,191 16,191 1.3. Securities and Derivative financial instruments 33,290 33,290 1.4. Interbank accounts/relations 90 90 1.5. Interbranch accounts 1.6. Loan operations 45,698 45,698 1.7. Leases (20) (20) 1.8. Other receivables 13,678 13,678 1.8.1. Credits for guarantees and collaterals honored 243 243 1.8.2. Foreign exchange portfolio 3,046 3,046 1.8.3. Income receivable 13 13 1.8.4. Securities clearing accounts 700 700 1.8.5. Other receivables Other 10,648 10,648 1.8.5.1. Other 2,875 2,875 1.8.5.2. Deferred Tax Assets on the negative base and tax loss 1,202 1,202 d 1.8.5.3. Deferred Tax Assets that rely on future profitability (except allowance for credit losses) 2,081 2,081 1.8.5.4. Deferred Tax Assets for allowance for credit losses 4,490 4,490 1.8.6. Other receivables allowance for credit losses (972) (972) 1.9. Other assets 624 624 2. Fixed Assets 777 777 2.1. Investments 285 285 2.1.1. Interest in subsidiaries 216 216 2.1.2. Other investments 69 69 2.2. Fixed assets for use 102 102 2.3. Leases 279 279 2.4. Intangible assets 65 65 2.4.1. Intangible assets before oct/13 8 8 l 2.4.2. Intangible assets after oct/13 57 57 h 2.5. Deferred assets 46 46 g Total Assets 110,552 110,552 1 Refers to the Prudential (Document 4060 of the Brazilian Central Bank). f 5

Liability Comparison between Balance Sheet and Regulatory Balance Sheet Sep15. Liabilities Balance Sheet Prudential, R$ million. Ref. to Regulatory Balance Sheet 1 Comments Annex 1 1. Current Liabilities and NonCurrent Liabilities 102,734 102,734 1.1. Deposits 4,826 4,826 1.2. Money market repurchase commitments 30,087 30,087 1.3. Acceptances and endorsements 24,912 24,912 1.4. Interbank accounts/relations 1 1 1.5. Interbranch accounts 221 221 1.6. Borrowings 4,590 4,590 1.7. Domestic onlendings Official institutions 3,521 3,521 1.8. Derivative financial instruments 3,785 3,785 1.9. Other liabilities 30,791 30,791 1.9.1. Collection and levy of taxes and alike 18 18 1.9.2. Foreign exchange portfolio 2,290 2,290 1.9.3. Social and statutory 143 143 1.9.4.Other liabilities Tax and social security 1,066 1,066 1.9.4.1. Tax and social security 848 848 1.9.4.2. Deferred tax liabilities 218 218 e 1.9.5. Other liabilities Securities clearing accounts 782 782 1.9.6. Other liabilities Subordinated debts 5,950 5,950 1.9.6.1. Debt instruments eligible for capital before Resolution 4.192 5,788 5,788 k 1.9.6.2. Other Subordinated debts 162 162 1.9.7. Debt instruments eligible for capital 847 847 j 1.9.8. Other liabilities Other 19,606 19,606 1.9.9. Creditors for anticipation of the residual value guaranteed (VRG) 89 89 2. Deferred Income 40 40 3. Shareholders' Equity 7,778 7,778 3.1. Interest of NonControlling Shareholders 2 i 3.2. Elegible Instruments to Common Equity Tier 1 7,484 7,484 a 3.3. Profit reserves 39 39 b, i 3.4. Capital reserves 255 255 c Total Liabilities 110,552 110,552 1 Refers to the Prudential (Document 4060 of the Brazilian Central Bank). 2 The amount of this account is R$ 395.80, however, it is reported as zero due to rounding in R$ million. 6

C. Internal Governance The Bank s governance structure is composed of collegial forums, formally organized and with delegation of levels of authority. Each governance body has its role, scope and composition defined in a dedicated norm, which specifies the management and the risk monitoring and tracking responsibilities. 1. Governance Structure of Committees The Bank has decisionmaking committees and technical commissions so as to ensure adequate capital management and the selfassessment of its risks. Special emphasis is placed on the ALM, Risks and Capital Committee (CARC) as the primary risk and capital management forum, on the Control and Operational Risk Committee and, at a higher level, the Executive Committee (ComEx), which also performs the tracking of its general performance. Finally, the bank also has a Board of Directors (CA 1 ), a Fiscal Council (CF 2 ) and an Audit Committee (COAUD 3 ). The figure below describes the structure of the Committees and Commissions of internal governance related to risk and capital management. The internal governance structure ensures that all stakeholders contribute effectively to the internal risk management and mitigation and capital adequacy assessment process. As detailed below, all the bodies play an important role in the Bank s risk and capital management. 1 Conselho de Administração 2 Conselho Fiscal 3 Comitê de Auditoria 7

Executive Committee ComEx: Attributions: definition of the strategy and monitoring the institution s general performance, market context and of all the topics addressed in the committees and commissions, with the duty of deliberating matters that require the participation of senior management or of arbitrating in case of a standoff in the committees. Periodicity: weekly. ALM, Risk and Capital Committee (CARC) Attributions: prepare a risk appetite proposal (to be ratified by the Board of Directors) and monitor relevant financial and nonfinancial risk indicators; analyze and ratify the proposals of the commissions (Market Risk, Credit, Liquidity, Tax and Business); assess and approve operations that may have an impact on consumption or capital base; monitor the capital planning for three years; monitor liquidity and cash reserves and forward proposals to the Executive Committee and to the Board of Directors regarding actions for risk management and control, as well as capital management. Periodicity: fortnightly. Reporting: Executive Committee. Market Risk Commission: Attributions: assesses exposures to market risks and follows up on the exposure limits of the main market risks of the trading portfolio. Periodicity: monthly. Reporting: CARC. Credit Risk Commission: Attributions: track and monitor the loan portfolio and the limits of exposure of the credit risk portfolio, both for Wholesale and for Consumer Finance; evaluation of stress testing results; tracking of the level of formation of provision for loans to deal with delinquency; evaluation of the credit risk measurement methodologies, evaluation of the contingency plans related to credit risk management, and issuance of opinions for the ALM, Risks and Capital Committee and/or for ComEx, on new strategies and rules for operations and management of the loan portfolio; monitor the effectiveness of credit collection and credit recovery actions as well as guarantees; discuss strategies for the promotion of timely debt payment. Periodicity: monthly. Reporting: CARC. Liquidity Commission: Attributions: evaluation of exposures to liquidity risks and of the cash strategy scenarios; follows up on and reviews minimum capital limits, and monitors and updates the funding contingency plan. Periodicity: fortnightly. Reporting: CARC. ALM Commission Attributions: assess and propose initiatives to protect and maximize the structural balance sheet under the economic and financial point of view, accounting and tax, guiding and triggering the responsible areas for technical studies. This includes identifying and treating risks that may adversely affect the balance sheet conditions. Periodicity: fortnightly. Reporting: CARC. Tax Commission Attributions: assessment of tax risks that may impact the balance sheets of the companies from the Conglomerate and statement for approval of the Technical Studies for realization of Tax Credits for financial businesses Resolution No. 3,059. Periodicity: monthly. Reporting: CARC. Business Commission Attributions: evaluation of the return on operations proposed by the business areas and preparation of opportunities for additional operations to increase revenue and maximize the return on the allocated capital. Periodicity: weekly. Reporting: CARC. 8

Control and Operational Risk Committee Attributions: consolidation of the work of the Sectorial Commissions of Risks and Controls of each Board of Officers/Area; analysis and validation of actions for the correction of weak points and improvement of the risk management system; tracking of operational risks and of the internal control system; monitoring of money laundering prevention and fraud prevention actions; and tracking of information security issues and business continuity plans. Periodicity: monthly. Reporting: Executive Committee. Sectorial Risk and Control Management Commissions Attributions: discuss, analyze and deliberate relevant points of risks, internal controls, compliance and internal auditing of each Board of Executive Officers/Area; perform the tracking of corrective actions and define the method of implementation of the relevant points raised; prioritize projects according to the risks and weak points identified. Periodicity: bimonthly. Reporting: Control and Operational Risk Committee. Information Security and Business Continuity Commission Attributions: deliberate Information Security and Business Continuity strategy besides risk assessment versus corporate action plan, keeping track of the implementation of established plans; monitor Information Security and Business Continuity incidents and indicators; design and keep track of crisis management processes and procedures; quantify and mitigate risks relating to information leakage and business discontinuity. Periodicity: quarterly. Reporting: Control and Operational Risk Committee. Money Laundering Prevention Commission (PLD) Attributions: defining standards for the performance of the different areas from the Conglomerate in relation to the PLD and to the fight of terrorist financing; reviewing the policies and procedures related to the subject, including the legal aspects related to the current legislation; establishing procedures for receiving and treating everything related to the subject. Periodicity: fortnightly. Reporting: Control and Operational Risk Committee. Fraud Prevention Commission Attributions: monitoring frauds volume, modus operandi and source; following the effectiveness of the preventive controls and detecting frauds; evaluation and proposing actions for fraud prevention through creating or modifying prevention rules, routines, operational processes and standards; proposing improvements on recovery values defrauded processes. Periodicity: monthly. Reporting: Control and Operational Risk Committee. Register of Governance Attributions: Manage the customer relationship transact with the institution (with the exception of suppliers), and set modus operandi, rules, forms, areas involved and scope of work for hire, maintenance and monitoring of these (where applicable), and may determine the actions it deems necessary for every situation, Periodicity: bimonthly. Reporting: Committee Controls and Operational Risk. Credit Committee Attributions: approving limits and/or lending operations referred by the commercial departments, evaluation of negotiations or agreements for settlement of problematic loans, and the lowering of credit restrictions (temporary or permanent) to individuals, groups and sectors of the economy. Periodicity: weekly. Reporting: Executive Committee. Product Committee: Attributions: evaluation of opportunities for new products; evaluation of the impact on assessment systems, operations, processes and controls; tracking of the implementation of new products; tracking of the implementation of improvements and of the maintenance of existing products; validation of compliance of new products and of structured transactions. Periodicity: weekly. Reporting: Executive Committee. 9

2. Organizational Structure For the execution of risk and capital management activities, the Bank relies on dedicated areas that are responsible for the consolidated controls of risks and capital. The main processes relating to risk and capital management are under the responsibility of the Board of Executive Officers of Risks, Executive Board of Internal Controls and Operational Risks to the Executive Board of Finance and Investor Relations. See below the structure of these management boards: Board of Directors Board of Executive Officers of Risks Executive Board of Internal Controls and Operational Risks Executive Board of Finance and Investor Relations The attributions of these specialized riskmanagement structures are detailed in the following chapters as part of the presentation of the Bank's approach to each type of risk management and control. 3. Policies, Standards, Procedures and Manuals The risk and capital management process uses a set of documents which establish the main guidelines which must be followed in risk management activities. The level of detail of these standards is structured depending on the purpose of each document and is organized according to the hierarchy shown below: Corporate Policies: fundamental principles and guidelines established by the highest hierarchical level, which must be followed by the entire organization and govern all the other regulations, procedures and product and service manuals; Rules: rules established to define the activities and the manner in which procedures are organized, detailing the aspects addressed by corporate policies; Procedures: operational rules established to describe the activities and their completion stages, detailing aspects addressed by the standards; e Product, Service, System and Calculation Modeling Manuals: set of documents that compile the main features on structuring of products, services, systems and calculation methodologies used. These regulations are published for the internal consultation at the Corporate Portal (Intranet), a and are reviewed and updated in specific intervals for each type of document, or whenever there are significant changes in business aims and strategies, or in the risk management approach and methodology. 4. Structured Flow of Information The institution adopts the practice of communicating information about risks and capital through reporting with specific periodicity to the parties involved in the process and senior management, which reinforces the timely monitoring of information that subsidizes corporate decisions. 10

Risk Managers and Business Units Commission Risk and Capital Report Board of Directors Committee The Bank adopts an integrated approach for managing risks and capital, aiming at organizing the decisionmaking process and defining tools for maintaining acceptable risk levels which are compatible with the volume of capital available, in line with the business strategy adopted. The consolidation of risks covers material exposures inherent to the Bank's business lines. The exposures are mainly grouped into the following risk categories: market, liquidity, credit and operational. This consolidation is done through a structured process that includes mapping, counting and aggregating values at risk. The levels of risk exposure and capital availability are monitored through a limit framework, incorporated into the Bank's activities by means of an organized management and control process which assigns functional responsibilities to the areas involved. Senior Management s involvement consists of monitoring and taking the actions required to manage risks. D. Capital management Following the regulations of BACEN and in accordance with the recommendations of the Basel Committee on Banking Supervision, the Bank adopts the prudential guidelines of capital management aiming at the efficient and sustainable management of its resources and contributing to promote the stability of the National System. In accordance with CMN Resolution No. 3,988 and BACEN Circular No. 3,547, the Bank has an institutional structure and policies for capital management, approved by the Board of Directors, in accordance with the Internal Capital Adequacy Assessment Process (ICAAP), covering the following items: Identification and appraisal of the relevant risks; Documented policies and strategies; Capital Plan for three years, including Capital targets and projections, main funding sources and Capital contingency plan; Stress tests and their impacts on Capital; Management reports to the Senior Management (Executive Board and Board of Directors); Evaluation of Capital Adequacy in the Regulatory and Economic View; and Annual Report of Internal Capital Adequacy Assessment Process (ICAAP). 1. Capital Adequacy (Regulatory view) At the institution, capital is managed in order to ensure adequacy within regulatory limits and to establish a strong capital base enabling the Bank to develop business and transactions in accordance with its strategic plan. Our annual capital plan includes growth projections for the loan portfolio and other transactions and assets, in order to assess adequacy of its capital to deal with the associated risks and ensure compliance with regulatory operational limits. Management reports tracking the capital allocated to risks and the capital ratios (Basel, Tier I and Common Equity Tier I) are disclosed on a monthly basis after the determination of the Capital and Capital Requirement to the areas involved. 11

1.1 Basel III The new capital requirement rules of Basel III took effect in Brazil in October 2013, and establish the new definitions and the new minimum capital requirements. They also define which companies should compose the Prudential Balance Sheet to be used to calculate the capital base and the capital requirement. The schedule below, defined by BACEN, presents the necessary adequacy for implementation, in Brazil, of the requirements defined in Basel III: Schedule for Basel III implementation 2013 2014 2015 2016 2017 2018 2019 Common Equity Tier I 4.5% 4.5% 4.5% 4.5% 4.5% 4.5% 4.5% Tier I Capital 5.5% 5.5% 6% 6% 6% 6% 6% Total Capital 11% 11% 11% 9.875% 9.25% 8.625% 8% Additional Capital Lower Limit 0.625% 1.25% 1.875% 2.5% Upper Limit 1.25% 2.5% 3.75% 5% Common Equity Tier I with Additional Capital (Lower Limit) 4.5% 4.5% 4.5% 5.125% 5.75% 6.375% 7% Common Equity Tier I with Additional Capital (Upper Limit) 4.5% 4.5% 4.5% 5.75% 7% 8.25% 9.5% Tier I Capital with Additional Capital (Lower Limit) 5.5% 5.5% 6% 6.625% 7.25% 7.875% 8.5% Tier I Capital with Additional Capital (Upper Limit) 5.5% 5.5% 6% 7.25% 8.5% 9.75% 11% Total Capital with Additional Capital (Lower Limit) 11% 11% 11% 10.5% 10.5% 10.5% 10.5% Total Capital with Additional Capital (Upper Limit) 11% 11% 11% 11.125% 11.75% 12.375% 13% Regulatory Adjustments 20% 40% 60% 80% 100% 100% In the following sections we present the breakdown of Capital and RiskWeighted Assets (RWA), from the perspective of the Prudential Balance Sheet 4, and the capital indicators. 1.2 Available Capital (Total Capital, Tier 1 Capital and Common Equity Tier 1 Capital) The Available Capital, classified as Total Capital, Tier 1 Capital and Common Equity Tier 1 Capital, is the equity used as a basis for verification of compliance with the operational limits of financial institutions. The Total Capital is obtained by adding Tier 2 Capital and Tier 1 Capital. The latter is obtained by adding Common Equity Tier 1 Capital and Additional Tier 1 Capital, as defined in CMN Resolution No. 4,192 and No. 4,193. The Common Equity Tier 1 Capital is composed of the shareholders equity and specific regulatory adjustments. The Bank ended Setp15 with Total Capital of approximately R$ 10,9 billion, presenting an decrease of R$ 101 million (0.9%) over the capital of Jun15, whereas that 62.8% of the value of this capital is composed of Tier 1 Capital. Tier 1 Capital (which as it has no Additional Tier 1 Capital, represents the same value as the Common Equity Tier 1 Capital) ended Sep15 at R$ 6,8 billion, an decrease of R$ 277 million (3,9%) over the prior quarter. 4 The Prudential Balance Sheet (CADOC 4060) is in force for base date June 15. Until December 14 the Balance Sheet, designated CADOC (Document 4040 of BACEN) was used to determine the Capital and the portions of the RiskWeighted Assets (RWA). 12

We present below the detailing of the breakdown of the Bank s capital requirement: Capital Composition Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Shareholders' Equity 7,778 7,847 7,683 0.9% 1.2% Common Equity Tier I Capital Regulatory Adjustments (949) (742) (339) 27.9% 179.7% Common Equity Tier I 6,828 7,105 7,344 3.9% 7.0% Authorized Instruments to compose Additional Tier I Capital N/A N/A Additional Tier I Capital Regulatory Adjustments N/A N/A Additional Tier I N/A N/A Tier I (Common Equity Tier I + Additional Tier I) 6,828 7,105 7,344 3.9% 7.0% Authorized Instruments to compose Tier II Capital 4,038 3,862 3,847 4.5% 5.0% Tier II 4,038 3,862 3,847 4.5% 5.0% Total Capital (Tier I+Tier II) 10,866 10,967 11,190 0.9% 2.9% Additional information about the instruments that constitute the capital is available in chapter F (Appendix 1 and Appendix 2) of this report. 1.3 RiskWeighted Assets RWA, as defined by CMN Resolution No. 4,193, is composed of the sum of riskweighted assets referring to the credit, market and operational risks: Credit risk Market risk RWA = RWA CPAD + RWA CAM + RWA JUR + RWA COM + RWA ACS + Operational Risk RWA OPAD Whereas: RWA CPAD: meaning the portion of riskweighted assets (RWA) relating to credit risk exposures subject to the calculation of capital requirement using a standardized approach (Bacen Circular No. 3,644); RWA CAM: portion of riskweighted assets (RWA) relating to exposures in gold, in foreign currency and in assets subject to exchange rate variation (Bacen Circular No. 3,641); RWA JUR: portion of riskweighted assets (RWA) relating to exposures subject to the variation of interest rates classified in the trading portfolio (Bacen Circulars No. 3,634, 3,635, 3,636 and 3,637); RWA COM : portion of riskweighted assets (RWA) relating to exposures subject to the variation of commodity prices (Bacen Circular No. 3,639); RWA ACS : portion of riskweighted assets (RWA) relating to exposures subject to the variation of the price of shares classified in the trading portfolio (Bacen Circular No. 3,638); RWA OPAD : portion of riskweighted assets (RWA) relating to the calculation of capital required for operational risk using a standardized approach (Bacen Circular No. 3,640). The Capital Requirement is obtained from the portions of RiskWeighted Assets, and is calculated as follows: Capital Requirements = Factor F x RWA Where Factor F is equal to: Until 31/12/2015 01/01/2016 01/01/2017 31/12/2018 01/01/2019 11% 9.875% 9.25% 8.625% 8% 13

The evolution of the RWA composition is presented in consolidated form in the table below: Composition of RiskWeighted Assets (RWA) Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Total RiskWeighted Assets (RWA) 76,597 73,786 73,223 3.8% 4.6% Credit Risk (RWA CPAD ) 68,523 66,293 66,967 3.4% 2.3% Market Risk (RWA MPAD ) 3,294 3,087 2,067 6.7% 59.3% Operational Risk (RWA OPAD ) 4,780 4,407 4,188 8.5% 14.1% We present below in detail the composition of RWA by Credit, Market and Operational Risks. 1.3.1 RiskWeighted Assets for Credit Risk (RWA CPAD ) The institution uses the Standardized Approach, defined by BACEN Circular No. 3,644, to calculate the portion of riskweighted assets (RWA) relating to credit risk exposures subject to calculation of capital requirement (RWA CPAD ). The amount determined for RWA CPAD is reported monthly to Senior Management, together with the Basel Ratio chart. Composition of RWA CPAD Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Credit Risk (RWA CPAD ) 67.386 66.293 66.967 1,6% 0,6% Risk Weight of 2% 42 52 28 19,1% 47,8% Risk Weight of 20% 331 154 274 114,9% 21,0% Risk Weight of 50% 2.848 2.631 2.453 8,2% 16,1% Risk Weight of 75% 23.362 24.132 24.152 3,2% 3,3% Risk Weight of 85% 12.206 10.960 17.249 11,4% 29,2% Risk Weight of 100% 22.799 22.927 17.957 0,6% 27,0% Risk Weight of 150% N/A N/A Risk Weight of 250% 2.356 2.266 1.854 4,0% 27,1% Risk Weight of 300% 2.121 2.027 3.945 4,6% 46,2% Risk Weight of 909,09% 182 534 175 65,9% 4,2% Risk Weight of 100% 1 (303) N/A 100,0% Risk Weight of 300% 1 (1.284) N/A 100,0% Without Risk weight 1.139 608 469 87,3% 143,2% (1) Refers to the RWA of the assets deducted from the determination of Common Equity Tier 1 Capital, according to the current resolution. 1.3.2 RiskWeighted Assets for Market Risk (RWA MPAD ) The Bank uses the standardized approach to calculate the portion of riskweighted assets (RWA), relating to the calculation of capital requirement for market risk (RWA MPAD ). As defined by CMN Resolution No. 4,193, the RWA MPAD portion consists of the sum total of the following components: RWA CAM, RWA JURS, RWA COM and RWA ACS. 14

The table below presents the values of the riskweighted assets for market risk (RWA MPAD ): Composition of RWA MPAD Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Market Risk (RWAMPAD) 3,294 3,087 2,067 6.7% 59.3% RWA CAM 719 741 229 3.0% 213.3% RWA JURS 2,551 2,312 1,633 10.4% 56.3% RWA JUR [1] 401 403 337 0.5% 19.1% RWA JUR [2] 1,242 946 891 31.3% 39.3% RWA JUR [3] 908 962 405 5.6% 124.5% RWA JUR [4] N/A N/A RWA COM 0 4 100.0% 100.0% RWA ACS 24 34 201 30.1% 88.2% Market Risk Capital Requirement Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Market Risk (Capital Requirement) 362 340 227 6.7% 59.3% PCAM 79 81 25 3.0% 213.3% PJUR 281 254 180 10.4% 56.3% PJUR[1] 44 44 37 0.5% 19.1% PJUR[2] 137 104 98 31.3% 39.3% PJUR[3] 100 106 44 5.6% 124.5% PJUR[4] N/A N/A PCOM 0 0 100.0% 100.0% PACS 3 4 22 30.1% 88.2% The table below presents the value of operations subject to variation of interest rates of operations classified in the banking book (RBAN): Interest Rate Risk in the Banking Book 1 Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual RBAN 494 190 203 159.9% 143.5% 1 Operation not classified in the trading portfolio. As defined by CMN Resolution No. 4,193: RWA CAM : Operations subject to exposures in gold, foreign currency and assets subject to exchange rate variation; RWA JURS : Operations subject to the variation of interest rates: RWA JUR [1] : of Realdenominated prefixed interest rates; RWA JUR [2] : Foreign exchange variation coupon rates RWA JUR [3] : Changes in price index coupons rates RWA JUR [4] : of coupon interest rates. RWA COM : Operations subject to the variation of commodity prices; RWA ACS : Transactions subject to share price variation; R BAN : Operations subject to the variation of interest rates of operations classified in the banking book. 15

1.3.3 Riskweighted assets for Operational risk (RWA OPAD ) The Bank uses the Alternative Standardized Approach (ASA) defined by BACEN Circular No. 3,640 to calculate the portion of riskweighted assets (RWA), relating to the calculation of capital requirement for operational risk (RWA OPAD ). The table below presents the opening of the riskweighted assets for operational risk: Composition of RWA OPAD Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Operational Risk (RWA OPAD ) 1 4,780 4,407 4,188 8.5% 14.1% 1 Portion of Operational Risk for financial entities. Operational Risk Capital Requirement Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Operational Risk (Capital Requirement) 1 526 485 461 8.5% 14.1% 1 Portion of Operational Risk for financial entities. 1.3.4 Capital Adequacy Analysis (Regulatory View) The capital adequacy analysis in the regulatory view is aimed at assessing compliance with the Basel Ratio determined in accordance with the current regulation, defined by the Brazilian Central Bank. This evaluation verifies whether the institution has sufficient available capital to cover the capital requirement for the risks of Pillar I, besides the additional requirement for coverage of the interest rate risk of the banking book (RBAN) according to Bacen Circular No. 3,365. Capital Adequacy (Regulatory view) Prudential R$ million. Sep15 Jun15 Sep14 Quarterly Annual Total Capital (TC) (a) 10,866 10,967 11,190 0.9% 2.9% Tier I Capital (b) 6,828 7,105 7,344 3.9% 7.0% Common Equity Tier I (CET1) (c) 6,828 7,105 7,344 3.9% 7.0% Total RiskWeighted Assets (RWA) (d) 76,597 73,786 73,223 3.8% 4.6% Credit Risk (RWA CPAD ) 68,523 66,293 66,967 3.4% 2.3% Market Risk (RWA MPAD ) 3,294 3,087 2,067 6.7% 59.3% Operational Risk (RWA OPAD ) 4,780 4,407 4,188 8.5% 14.1% Capital Requirement (e) 8,300 8,116 8,055 2.3% 3.1% Margin Capital (a e) 2,566 2,851 3,136 10.0% 18.2% RBAN (f) 494 190 203 159.9% 143.5% Margin Capital with RBAN (a e f) 2,072 2,661 2,933 22.1% 29.4% The Institution ended Sep15 with a Basel Ratio at 14.4%, with excess capital, calculated by the difference between the Capital and the Capital Requirement, of approximately R$ 2.0 billion (including RBAN). The Tier I Capital ratio reached 9.0%, which represents a decrease of 58 bps over the prior quarter and of 305 bps above the regulatory limit (6%). Ratios Prudential Sep15 Jun15 Sep14 Quarterly Annual Basel Ratio (a / d) 14.4% 14.9% 15.3% 46 bps 88 bps Tier I Capital Ratio (b / d) 9.0% 9.6% 10.0% 58 bps Common Equity Tier 1 Ratio (c / d) 9.0% 9.6% 10.0% 58 bps 16

See below the evolution of the Basel Ratio and Tier I Capital Ratio from the regulatory perspective between Sep14 and Sep 15: (*) For the period analyzed Tier I Capital Ratio equal to the Common Equity Tier 1 Capital Ratio 2. Internal Capital Adequacy Assessment Process ICAAP In accordance with Resolution No. 3,988 and Circular No. 3,547, the institution performs the Internal Capital Adequacy Assessment Process (ICAAP) and produces its respective report made available to BACEN yearly, covering the capital plan, stress test, capital contingency plan and management and evaluation of the need for capital in the presence of material risks to which the institution is exposed, among other topics. According to the ICAAP report for the base date December 31, 2014, the Bank regards its capitalization levels as adequate, since both the current regulatory capital, and the capital projections aligned with strategies for the next three years, are within regulatory and internal limits. 17

E. Risk management Risk management of the institution is performed for risks considered relevant to Senior Management (Material Risks), which are dealt with and monitored by specific processes means. The identification of material risks is performed recurrently, based on specific internal methodology and with the participation of the risk area in committees related to business management, such as the Executive Committee and Product Committee. 1. Credit Risk The aim of credit risk management is to provide support for the Senior Management in the decisionmaking process by defining strategies and policies and establishing operational limits, risk mitigation tools and procedures to maintain credit risk exposure within levels deemed acceptable by the Bank s management. 1.1 Definition Credit Risk is defined as the likelihood of losses occurring due to the borrower or counterparty not complying with their respective financial obligations in accordance with agreed terms. 1.2 Basic Principles In accordance with CMN Resolution No. 3,721, the Bank has an institutional structure and policies for credit risk management approved by the Board of Directors and the basic principles observed in management and control were established in compliance with current regulations and market practices, as follows: Manuals and documents containing the organizational structure, relevant products, corporate policies, standards and procedures including flowcharts and rules related to the governance, business and credit support processes; Technological environment encompassing the credit cycle ranging from risk admission, tracking and monitoring, to restructuring when applicable; Validation process covering risks involved in systems, accuracy of models used for calculations and quality of processed data, as well as the coverage of the documentation; Committee structure and powers for approving credit; Criteria and procedures for selecting clients and preventing money laundering; Credit analysis, lending and management standards; Procedures for analysis, approval and release of new products involving credit risk; Classification of portfolio risk levels, considering the clients ratings, the collateral involved, the maturity dates and operational arrears; Monitoring sector and conglomerate concentration, as well as monitoring internal and regulatory limits defined by policies and rules; Managing counterparty credit risk and limits for derivatives; Evaluating risk in transactions for sales or transfer of assets; Formalized procedures covering credit recovery flows; Setting limits for carrying out transactions subject to credit risk, both individually and at the aggregate level a group of companies with common economic interest and for borrowers or counterparties with similar characteristics; Control of guarantees and instruments for mitigating credit risk; Monitoring of the loan asset portfolio using indicators with the aim of minimizing the risk of losses; Performance of stress tests, measuring the combined effect of adverse movements in macroeconomic indicators, estimating financial impacts affecting delinquency, provisions and consequently, available and required capital; Periodic reporting to Senior Management addressing the performance indicators of risk management based on the policies and strategies adopted; and Documented procedures for policy exceptions. 18

In addition, credit risk management activities are carried out by specific control units, strengthening their performance with independence in relation to their trading units. 1.3 Risk management structure and involved areas Credit risk management activities include a number of strategic, tactical and operational activities permeating the entire 'business chain', from product development, setting limits, portfolio management, management information, collection and credit recovery, as well as monitoring the effectiveness of processes and controls used. 1.3.1 Board of Risks structure Involved areas Risk management attributions are performed by formally set up units with technically qualified staff, under separate management, with clearly defined responsibilities. Wholesale and Retail Credit Risk Management Wholesale Credit Risk Management: its mission is to direct and continuous monitor the credit risk from the Wholesale Bank, aiming to mitigate the associated risks. It has two different structures: Credit Policies, that manages aim is to elaborate analyses and technical studies that may result in policies identifying, measuring and mitigating the credit risk from the Wholesale Bank. Additionally, another aim is to ensure the adherence of the wholesale credit risk policies to regulatory devices, as well as answering the internal and external regulatory requirements, concerning the wholesale credit risk. Monitoring the Credit Risk, this supervision duty is to monitor the recurrent wholesale banking portfolio, detecting warning signs that identify, with priority, advance and in a timely manner, the credit deterioration in individual and aggregate levels Retail Credit Risk Management and Modeling: responsible for developing statistics models, such as Credit Score, Expected Loss, Behavior Score, Collection Score, and classification of private companies and public agencies, in line with the requirements of the new Basel Accord. MIS Wholesale and Retail Credit Infrastructure: responsible for the credit systems management, interface with external bureaux, consolidation of reports of measurement and control of Wholesale and Retail portfolio exposures in an aggregate level (portfolio vision). Credit collection and Strategy: manages the Retail Credit Recovery, Wholesale Credit Recovery and Planning and Recovery teams, whose main attributions are detailed below: credit collections and ongoing monitoring, along with the legal department, and bringing judicial proceedings, acting as liaison and coordinator between the units involved, and analyzing and submitting renegotiating proposals to the proper court. Credit recovery Retail: Responsible for the mass and litigious administrative credit collection (products: payroll loans, cards, personal credit and consumer credit) guard and sales of resumed guarantees and conceptualization, specification and monitoring recovery projects. Recovery Planning: responsible for report and collection indicator generation and monitoring, and establishing related policies and calculating the allowance for loan losses. Environmental and Social Risk: responsible for assessing the social and environmental aspects with which the client is involved, such as: Waste Management, Compliance with Legislation, Working Conditions and Use of Natural Resources, establishing their level of environmental and social risk and issuing a social and environmental opinion to subsidize the Lending area in the credit decision process. Integrated Risk and Capital: responsible for the (procedural and methodological) coordination of the Internal Capital Adequacy Assessment Process (ICAAP), risk appetite, stress test and ALM, Risks and Capital Committee (CARC) and for the determination and analysis of the regulatory and economic capital of credit risk, as well as for the capital ratios (Basel, Tier I and Common Equity Tier I). Derivative Risk Control: performs the daily monitoring of the portfolio of derivatives held with clients. Credit recoverywholesale: responsible for management and control of loans in arrears, supporting the commercial unit's renegotiations, arranging friendly 19

1.3.2 Credit Lending Structure and Involved Areas Credit CIB (Corporate & Investment Banking) Responsible for the credit analysis and approval process of the CIB segment. It s a member of the CIB credit committee and of the decisionmaking committees of the area, monitoring the business strategy based on market scenarios and internal credit policies and instructs the commercial managers in relation to best credit practices, aiming at a sustainable growth and alignment with the organization's strategic objectives. Retail Credit Responsible for the individual analysis, when required by policies, of requests for credit produced through the corporate commercial structures of the Retail segment, ensuring that they are dealt with in compliance with the norms and procedures and with the respective approval levels of each operation. It is also responsible for control over the risk exposure of the portfolio. 1.3.3 Board of Internal Controls and Operational Risks structure Involved Areas Validation of models Responsible for the independent assessment of the risks associated with the development process model, monitoring the action plans prepared to mitigate risks identified in the validation of models and monitoring the model performance. 1.4 Credit Risk Management The institution performs credit risk management through the adoption of governance, instruments and tools that allow the identification, assessment and measurement, tracking and reporting of the risk incurred in its activities in the main stages of credit risk, which are lending, credit monitoring and credit recovery. Credit Lending The lending process of the wholesale segment is based on detailed assessments of proponent clients, either in the admission of prospective clients or in the renewal of credit limits for existing clients. In the credit analysis process, the institution relies on integrated systems that manage the entire analysis flow, from the proposition of limits, through to the updating of detailed knowledge of the client (Know Your Client KYC, verification of documentation and inquiries to credit bureaus and market information), submission to the credit approval levels and implementation of the decisions of the corresponding committees. Proposals evaluations are segmented into specific organizational structures as the customer service level (Industry Team and Regional Team) and consider aspects related to the company s management, socioeconomic information, competitive environment, market aspects and economic sector, among others. After the evaluation a credit presentation is elaborated which compiles the main aspects of risks and its mitigation, that must be analyzed by the Credit Committee. In the Retail segment, credit proposals are processed by an automated, parameterized system supported by a scoring model, which favor greater efficiency and reliability in lending decisions, which are intended for individuals that demonstrate payment ability and reputability. For cases where the scoring model does not automatically decide, the credit desk carries out a more detailed check of all the aspects involved in the contract, with the intention of approving or rejecting the credit proposal. Credit Monitoring In Wholesale, after the approval of the credit limit and/or loan for the client, these are tracked by means of recurrent monitoring of the portfolio, identifying warning signs that demonstrate, with propriety, in advance and in a timely manner, the deterioration of credit at individual and aggregate levels. In Retail segment, the institution performs the monitoring of the credit risk through performance indicators and management reports of the credit portfolio. Credit Recovery The credit recovery area works together with the monitoring area from the first day of delinquency observed in loans. Several strategies are used to maximize credit collection opportunities. See below the credit risk exposures according to definitions established by Circular No. 3,644, segregated by products, country and geographical regions, and economic sector: 20