AMERICAN INTERNATIONAL GROUP INC

Risk management includes the identification and measurement of various forms of risk, the establishment of risk thresholds and the creation of processes intended to maintain risks within these thresholds while optimizing returns.

Risk management is an integral part of our business strategy and a key element of our approach to corporate governance. We have an integrated process for managing risks throughout our organization in accordance with our firm-wide risk appetite. Our Board of Directors has oversight responsibility for the management of risk. Our Enterprise Risk Management (ERM) Department oversees and integrates the risk management functions in each of our business units, providing senior management with a consolidated view of AIG’s major risk positions. ERM embeds risk management in our key day-to-day business processes. Nevertheless, our risk management efforts may not always be successful and material adverse effects on our business, results of operations, cash flows, liquidity or financial condition may occur. For further information regarding the risks associated with our business and operations, see Part II, Item 1A. Risk Factors.

AIG employs a Three Lines of Defense model. AIG’s business leaders assume full accountability for the risks and controls in their segments, and ERM performs a review, challenge and oversight function. The third line consists of our Internal Audit Group that provides independent assurance to AIG’s Board of Directors.

For additional information on AIG’s risk management program, see Part II, Item 7. MD&A ─ Enterprise Risk Management in the 2023 Annual Report.

The scope and magnitude of our market risk exposures is managed under a robust framework that contains defined risk limits and minimum standards for managing market risk in a manner consistent with our risk appetite statement. As of September 30, 2024, other than the elimination of market risk sensitive data as a result of the deconsolidation of Corebridge, there have been no material changes in our market risk exposures, which may be found in Part II, Item 7. MD&A ─ Enterprise Risk Management in the 2023 Annual Report. See Part I, Item 1A. Risk Factors in the 2023 Annual Report on how difficult conditions in the financial markets and the economy generally may materially adversely affect our business and results of our operations.