BANK OF AMERICA CORP DE

Reputational risk is the risk that negative perception of the Corporation may adversely impact profitability or operations. Reputational risk may result from many of the Corporation’s activities, including those related to the management of strategic, operational, compliance, liquidity, market (price and interest rate) and credit risks.

The Corporation manages reputational risk through established policies and controls embedded throughout its business and risk management processes. We proactively monitor and identify potential reputational risk events and have processes established to mitigate reputational risks in a timely manner. If reputational risk events occur, we focus on remediating the underlying issue and taking action to minimize damage to the Corporation’s reputation. The Corporation has processes in place to respond to events that give rise to reputational risk, including educating, using policy influencers and implementing communication strategies, as applicable, to mitigate the impact. The Corporation’s organization and governance structure provides oversight of reputational risks through management and Board or Board committees. Each FLU has a MRC that is responsible for the oversight of reputational risk, including approval for business activities that present elevated levels of reputational risks. Additionally, reputational risk reporting is provided to senior management and the Board regularly.