CITIZENS FINANCIAL GROUP INC/RI

Management is responsible for establishing and maintaining an adequate system of internal control over financial reporting as defined in Rule 13a-15(f) of the Securities Exchange Act of 1934. The Company’s system of internal control over financial reporting is designed, under the supervision of the Chief Executive Officer and the Chief Financial Officer, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with accounting principles generally accepted in the United States of America.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect all misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions or that the degree of compliance with the policies or procedures may deteriorate.

Management assessed the effectiveness of the Company’s system of internal control over financial reporting as of December 31, 2025 based on the framework set forth by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control – Integrated Framework (2013). Based on that assessment, management concluded that, as of December 31, 2025, the Company’s internal control over financial reporting is effective.

The Company’s internal control over financial reporting as of December 31, 2025 has been audited by Deloitte & Touche LLP, an independent registered public accounting firm, as stated in their accompanying report appearing on page 84, which expresses an unqualified opinion on the effectiveness of the Company’s internal control over financial reporting.

Citizens Financial Group, Inc. | 80