Americas Region Reputational Risk Committee Policy Section 1: Scope and Responsibility Deutsche Bank The Americas Region supports business practices that comply with the Group Reputational Risk Management Program, as outlined in the DB Group Reputational Risk Management Program Policy dated May 9, 2011, and also complies with the requirements of the Group "Conduct of Meetings" policy. Within the Americas region, consideration of all reputational risk issues is the responsibility of the Americas Regional Governance Board (RGB). The RGB has delegated such consideration to the Americas Reputational Risk Committee (ARRC), a permanent sub-committee of the RGB. The governance requirements described in this remit are applicable to all businesses, infrastructure groups and employees in the United States, Canada, Latin America and the Cayman Islands. 1.1 Mission The ARRC functions as the senior regional approval and oversight committee in the Americas for reputational risk. The ARRC is responsible for the development of a regional reputational risk appetite, setting standards for ARRC review, establishing criteria for escalation within and outside the region, and providing guidance to assist the Business Divisions in identifying reputational risk issues for escalation to the ARRC. The ARRC provides oversight of the regional reputational risk appetite. 1.2 Tasks and Responsibilities of the ARRC The ARRC is responsible for reviewing, assessing, and opining on all reputational risk issues brought to the ARRC by businesses or Control & Support functions. Resolution of an issue means that the Committee may approve, approve with conditions, defer or reject any proposal presented. The ARRC is also responsible for escalating issues that cannot or should not be decided within the region (see Section 8). The ARRC has a responsibility to report all actions taken within the region through the RRN (Reputational Risk Network) for further aggregation on a global le