KEYCORP NEW

We are responsible for the preparation, content and integrity of the financial statements and other statistical data and analyses compiled for this annual report. The financial statements and related notes have been prepared in conformity with U.S. generally accepted accounting principles and include amounts which of necessity are based on management’s best estimates and judgments and give due consideration to materiality. We believe the financial statements and notes present fairly our financial position, results of operations and cash flows in all material respects.

We are responsible for establishing and maintaining a system of internal control that is designed to protect our assets and the integrity of our financial reporting as defined in the Securities Exchange Act of 1934, as amended. This corporate-wide system of controls includes policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the Corporation; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of the consolidated financial statements in conformity with U.S. generally accepted accounting principles, and that receipts and expenditures of the Corporation are made only in accordance with authorizations of management and directors of the Corporation; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the Corporation’s assets that could have a material effect on the consolidated financial statements. All employees are required to comply with our code of ethics. We conduct an annual certification process to ensure that our employees meet this obligation. Although any system of internal control can be compromised by human error or intentional circumvention of required procedures, we believe our system provides reasonable assurance that financial transactions are recorded and reported properly, providing an adequate basis for reliable financial statements.

During 2023, the Audit Committee of the Board of Directors met regularly with Management, internal audit, and the independent registered public accounting firm, Ernst & Young LLP, to review the scope of their audits and to discuss the evaluation of internal accounting controls and financial reporting matters. The independent registered public accounting firm and the internal auditors have free access to, and meet confidentially with, the audit committee to discuss appropriate matters. Also, the Corporation maintains a Disclosure Review Committee. This committee’s purpose is to design and maintain disclosure controls and procedures to ensure that material information relating to the financial and operating condition of the Corporation is properly reported to its Chief Executive Officer, Chief Financial Officer, General Auditor, and the Audit Committee of the Board of Directors in connection with the preparation and filing of periodic reports and the certification of those reports by the Chief Executive Officer and the Chief Financial Officer.

Management’s Assessment of Internal Control over Financial Reporting

Management assessed, with participation of the Corporation’s Chief Executive Officer and Chief Financial Officer, the effectiveness of our internal control and procedures over financial reporting using criteria described in “Internal Control - Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework). Based on that assessment, we believe we maintained an effective system of internal control over financial reporting as of December 31, 2023.

Because of inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

The Corporation's internal control over financial reporting as of December 31, 2023, has been audited by Ernst & Young LLP, an independent registered public accounting firm, as stated in their accompanying report dated February 22, 2024.

Christopher M. Gorman Clark H. Khayat

Chairman and Chief Executive Officer Chief Financial Officer