Audit DB's BCM Program is subject to regular reviews by internal and external audit, and regulatory authorities Regulatory Obligations In the case of conflict between the Business Continuity Policies and Standards or the Technical Disaster Recovery Standards and local regulatory obligations, the stricter obligation is adhered to. Sincerely yours, Information & Resilience Risk Management Deutsche Bank Please note that this information is subject to modification. CONFIDENTIAL - PURSUANT TO FED. R. CRIM. P. 6(e) DB-SDNY-0071464 CONFIDENTIAL SDNY_GM_00217648 EFTA01375837