CITIZENS FINANCIAL GROUP INC/RI

We are committed to maintaining a strong, integrated, and proactive approach to the management of all risks to which we are exposed in pursuit of our business objectives. A key aspect of our Board’s responsibility as the main decision-making body is setting our risk appetite to ensure that the level of risk that we are willing to accept in the attainment of our strategic business and financial objectives is clearly understood.

To enable our Board to carry out its objectives, it has delegated authority for risk management activities, as well as governance and oversight of those activities, to a number of Board and executive management level risk committees. The Executive Risk Committee, chaired by the Chief Risk Officer, is responsible for oversight of risk across the enterprise and actively considers our inherent material risks, analyzes our overall risk profile, and seeks confirmation that the risks are being appropriately identified, assessed, and mitigated. Reporting to the Executive Risk Committee are the following committees covering specific areas of risk: Compliance and Operational Risk, Model Risk, Credit Policy, Asset Liability, Business Initiatives Review, and Conduct and Ethics.

There have been no significant changes in our risk management practices, risk framework, risk appetite, or credit risk management as described in “Risk Management” in our 2025 Form 10-K.