As of May 27, 2025 Benedicta A. Du-Baladad Chairperson Roberto C. Benares Vice Chairperson Michelangelo R. Aguilar Member, President and CEO Marito L. Platon Member Melinda S. Gonzales-Manto Member Fe B. Barin Member Alexander R. Magno Member Jose Carmelo C. Nograles Member Jose A. Barcelon Member Antonio S. Laquindanum Member, Chief Financial Officer Leonardo J. Matignas, Jr. Lead Independent Director Rebecca Maria A. Ynares Independent Director Ricardo D. Fernandez Independent Director Daniel Gabriel M. Montecillo Independent Director Simon R. Paterno Independent Director Jose T. Pardo Chairman, Board of Advisors Francis C. Chua Vice Chairman, Board of Advisors Aurora T. Calderon Member, Board of Advisors Ferdinand K. Constantino Member, Board of Advisors Cecile L. Ang Member, Board of Advisors Evita C. Caballa Corporate Secretary Board Committees Executive Committee 1. ROBERTO C. BENARES, Chairman 2. MICHELANGELO R. AGUILAR, Vice Chairperson 3. BENEDICTA A. DU-BALADAD, Member 4. MARITO L. PLATON, Member 5. ALEXANDER R. MAGNO, Member Trust and Investment Committee 1. BENEDICTA A. DU-BALADAD, Chairperson 2. MICHELANGELO R. AGUILAR, Member 3. ALEXANDER R. MAGNO, Member 4. MARITO L. PLATON, Member 5. DON CARLO P. HERNANDEZ, Member/Chief Trust Officer JOSE T. PARDO, Advisor FRANCIS C. CHUA, Advisor Audit Committee 1. LEONARDO J. MATIGNAS, JR. (Lead Independent Director), Chairman 2. REBECCA MARIA A. YNARES (Independent Director), Member 3. SIMON R. PATERNO (Independent Director), Member 4. JOSE CARMELO C. NOGRALES, Member 5. MELINDA S. GONZALES-MANTO, Member Board Risk Oversight Committee 1. SIMON R. PATERNO (Independent Director), Chairman 2. DANIEL GABRIEL M. MONTECILLO (Independent Director), Member 3. LEONARDO J. MATIGNAS, JR. (Independent Director), Member 4. FE B. BARIN, Member 5. MELINDA S. GONZALES-MANTO, Member Corporate Governance Committee 1. DANIEL GABRIEL M. MONTECILLO (Independent Director), Chairman 2. RICARDO D. FERNANDEZ (Independent Director), Member 3. SIMON R. PATERNO (Independent Director), Member 4. JOSE CARMELO C. NOGRALES, Member 5. FE B. BARIN, Member Nomination, Compensation, & Remuneration Committee 1. REBECCA MARIA A. YNARES (Independent Director), Chairperson 2. RICARDO D. FERNANDEZ (Independent Director), Member 3. DANIEL GABRIEL M. MONTECILLO (Independent Director), Member 4. FE B. BARIN, Member 5. ANTONIO S. LAQUINDANUM, Member JOSE T. PARDO, Advisor FERDINAND K. CONSTANTINO, Advisor Related Party Transaction Committee 1. RICARDO D. FERNANDEZ (Independent Director), Chairman 2. REBECCA MARIA A. YNARES (Independent Director), Member 3. LEONARDO J. MATIGNAS, JR. (Lead Independent Director), Member 4. JOSE CARMELO C. NOGRALES, Member 5. MELINDA S. GONZALES-MANTO, Member Information Technology Steering Committee 1. ROBERTO C. BENARES, Chairman 2. MICHELANGELO R. AGUILAR, Member 3. JOSE A. BARCELON, Member 4. MARITO L. PLATON, Member 5. MARIE SUZANNE SISON-SEVILLA, Member/Chief Information Officer CECILE L. ANG, Advisor Underwriting Committee 1. MICHELANGELO R. AGUILAR, Chairman 2. ROBERTO C. BENARES, Member 3. ALEXANDER R. MAGNO, Member 4. JOSE C. BARCELON, Member 5. ANTONIO S. LAQUINDANUM, Member AURORA T. CALDERON, Advisor Board of Trustee of the Retirement Plan 1. Human Resource Management and Development Division Head, MELANIE P. SANTOS, Chairperson 2. Risk Management Division Head, JEREMY H. REYES, Member 3. Finance & Controllership Group Head, ANTONIO S. LAQUINDANUM, Member 4. Treasury Group Head, FELIPE MARTIN F. TIMBOL, Member 5. Bank of Commerce Employees Union President, HECTOR JONATHAN F. DOMINGUEZ, Member BOARD COMMITTEE CHARTERS Executive Committee Charter Audit Committee Charter as of December 20, 2022 Audit Committee Charter as of May 30, 2023 Internal Audit Charter as of July 2022 Internal Audit Charter as of May 2024 Board Risk Oversight Committee Charter Corporate Governance Committee Charter Nominations, Compensation, and Remuneration Committee Charter Trust and Investments Committee Charter Related Party Transactions Committee Information Technology Steering Committee Charter Underwriting Committee Charter Risk Management Philosophy Risk Philosophy and Guiding Principles The Bank’s goal is to generate steady returns to shareholders’ capital. With this objective in mind, the Bank’s business principles, strategies, and operations are designed to achieve cash flows in excess of its obligations to its fund providers and stakeholders. To realize this, the Bank takes risks that are inherent in the conduct of its commercial banking franchise. Risk taking presents opportunities to earn more-than expected returns, provided that the risk-taking process is intentional, investigated, and controlled. The Bank’s risk-taking activities are guided by the following principles: • The Bank is in the business of taking risks. • The Bank takes risks after a deliberate process to identify the risks, to dimension them, and to decide whether to reduce, avoid, accept, or transfer the risk. • The Bank adopts risk-management practices suited to the scope and sophistication of its business and in line with global best practices. • The Bank’s risk management is the concern of everyone. • The Bank recognizes the independence of risk managers and risk takers from each other. Risk Appetite and Strategy The capital of the Bank, once invested, is already exposed to risks. The risk appetite of the Bank is the type and threshold of risk that it is willing to seek, accept, or tolerate in the pursuit of its business objectives. This is based on the Bank’s capacity to absorb risks, given its capital, liquidity, borrowing capabilities, or statutory restrictions. The Risk Appetite Statements of the Bank are either quantitative or qualitative. Risk Appetite Statements are developed by the Bank to provide guidance on the various types of its risk exposures such as credit, market, liquidity, and operational risk. The Bank’s strategy to manage risk may be to reduce, avoid, accept, or transfer the risk. Management is under obligation to exercise reasonable care, skill, and caution when engaging in business to ensure the appetite is not exceeded, to maximize the value of capital, and to preserve it when an adverse event occurs. Each and every employee is responsible to implement and adhere to the Bank’s risk appetite while making business decisions daily. Risk Management Oversight The Bank’s Board of Directors (BOD), Board Risk Oversight Committee (BROC), and Risk Management Division (RSK) are responsible for setting the overall risk-management framework and risk appetite of the Bank. The BOD is the sole arbiter of the risks taken by the organization, with the sole discretion of determining what manner (strategic direction) and magnitude (risk appetite) of risk are suitable for the organization. The BOD develops both the strategic direction and the risk appetite with inputs provided by Management. The Board established the BROC to oversee the promotion of a risk-management culture within the Bank. The BROC is responsible for establishing and maintaining a sound risk-management system. It assists the Board in its risk oversight function by: • Identifying and evaluating risk exposures; • Developing risk-management strategies; • Implementing and periodically reviewing the risk management framework; and • Promoting a culture that is conscious of the importance of risk management and capital adequacy. The Bank considers the understanding and the management of risk as a key part of its business strategy. The RSK is mandated to strengthen the Bank’s risk management infrastructure to meet the requirements of its business. The RSK implements the risk-management directives of the Board and the BROC by: • Formulating and recommending policies to manage market, liquidity, credit, operational, information technology, and trust risks arising from the business of the Bank; • Implementing the risk-management framework approved by the BOD; • Actively promoting a culture of risk awareness and risk management; and • Coordinating with Finance and Controllership Group on the adequacy of the Bank’s capital in absorbing the risks present in the Bank’s business. The RSK reports to the Board through the BROC and is independent from the risk-taking business units of the Bank. Headed by the Chief Risk Officer, it comprises the following departments: