Annual Integrated Report

116 Content Details Annual Integrated Report Table of Contents Introduction Value Creation | Economic Performance | Environmental Social Governance Appendices 203-2 Significant indirect economic impacts Our PRSAC outlines the social, environmental, and climate principles and guidelines that govern our business practices and relationships with stakeholders. The Policy aims to prevent negative impacts and expand positive impacts arising from our financial operations and activities. The document can be accessed at https://cms.santander.com.br/sites/WPS/documentos/arq-prsac- traduzida0823/23-08-10 165935 prsac ingles.pdf Resiliência operacional e dos negócios 3-3 Management of material topics Where to find the indicator Reasons for omission Pages 38, 39, 46 to 55 Information not applicable. As we deem social, cultural, and environ- mental investments to have signifi- cant indirect economic impacts, we have not identified any significant negative indirect economic impacts. (item a) To safeguard the integrity of individuals and ensure the execution of essential functions for delivering services to our customers, we have implemented an operational risk methodology that includes strategic mechanisms for activating business continuity plans in the event of various types of disasters, in which all necessary areas are equipped to support crisis containment. Given the scope of our ecosystem, we are exposed to a range of factors, including national strikes, natural disasters, pandemics, and other disruptive events. Social, environmental, and climate risks can have a significant adverse impact on our operations. As part of our customer risk assessment, we consider a variety of risk factors, including environmental, social, and climate aspects. Any failure or oversight on our part to accurately identify and assess these factors and potential risks prior to entering proposed transactions with clients may result in image and reputational damage, as well as have a material adverse impact on our business, operational results, and financial condition. For more information, please refer to Form 20-F, page 37. Our Business Continuity Management department is responsible for establishing, implementing, maintaining, and overseeing a cyclical system that aims to minimize risks and impacts on crucial products and services in the event of a disaster or contingency activation that results in the suspension of our operations. This governance encompasses all processes and functions of the Bank, aligned with best market practices and regulatory requirements on the subject. Our governance model extends from identifying critical businesses to testing contingency procedures and alternative infrastructures to ensure the continuity of Santander's core businesses. To effectively manage crises that may result in real negative impacts, we have established a governance framework that involves the Institution's senior leadership. This includes committees and business continuity plans that outline the necessary mitigation actions to be taken to restore normalcy to our operations as quickly as possible. For more information on Business Continuity Management, please visit https:// cms.santander.com.br/sites/WPS/documentos/arq-prsac-traduzida0823/23-08-10_165935_prsac_ingles. pdf. Our procedures track the efficacy of the measures taken to ensure business continuity. Through controls and indicators, we monitor the governance performance and conduct tests to ensure the effectiveness of contingency strategies. We also monitor news that may impact our operations and track customer feedback on social media and service channels, in addition to conducting awareness- raising training. After the tests and events are materialized, we evaluate the lessons learned, which feed back into procedures, internal rules, and define action plans to be implemented. Pages 9, 22, 23, 31 Information not applicable. The bu- siness continuity activity aims to ma- nage negative impacts while striving to generate tangible and potential positive impacts. (Item d.iii.) Confidential information. We possess controls and indicators to moni- tor the effectiveness of measures pertaining to the subject matter, however, due to the strategic nature of the information, it is not disclosed. The effectiveness of these measures drives objectives and goals, directly impacting the performance review of employees involved with the business. (Item e.ii.,iii) Confidential information. Continuous testing and engagement with our internal and external stakeholders, through interaction with customers and business partners, generate va- luable feedback to enhance proces- ses and policies. The test results are confidential. Our governance model includes reporting and/or approvals for actions taken, which may escala- te to the Board of Directors depen- ding on the situation or decision, in addition to informing our regulators. (item f.) Santander 117

View entire presentation