BANK OF AMERICA CORP DE

Reputational risk is the risk that negative perception of the Corporation may adversely impact profitability or operations. Reputational risk may result from many of the Corporation’s activities, including those related to the management of strategic, operational, compliance, liquidity, market (price and interest rate) and credit risks.

The Corporation manages reputational risk through established policies and controls embedded throughout its business and risk management processes. We proactively monitor and identify potential reputational risk events and have processes established to mitigate reputational risks in a timely manner. If reputational risk events occur, we focus on remediating the underlying issue and taking action to minimize damage to the Corporation’s reputation. The Corporation has processes and procedures in place to respond to events that give rise to reputational risk, including educating individuals and organizations that influence public opinion, and implementing communication strategies to mitigate the risk. The Corporation’s organization and governance structure provides oversight of reputational risks. Reputational risk reporting is provided regularly and directly to senior management and the ERC, which provides primary oversight of reputational risk. In addition, each FLU has a committee, which includes representatives from Legal and Risk, that is responsible for the oversight of reputational risk, including approval for business activities that present elevated levels of reputational risks.