Divisional Chief Executives Supported by Divisional Risk Committees Executive Committee Group Chief Executive Group Functions Group Finance Director Group Risk Director Group Capital Committee Group Funding and Liquidity Share Market Activity Committee Regulatory Capital Adequacy Committee Group Credit Risk Committee Group Market Risk Committee Group Insurance Risk Committee Group Operational Risk Committee Audit Committee Divisional Risk Control Committees Group Internal Audit HBOS Board 1 st Line of Defence 2 nd Line of Defence3 rd Line of Defence

1 st Line of DefenceRisk Management Divisional Chief Executives Divisional Risk Specialists Divisional Risk Committees Strategy Performance Risk control 2 nd Line of DefenceRisk Oversight Group Chief Executive Executive Committee Group Functions (inc. Group Risk and Group Finance) Executive Risk Committees Centralised policy management Independent oversight of risk 3 rd Line of DefenceRisk Assurance Audit Committee Divisional Risk Control Committees Group Internal Audit Independent assurance Risk Management

Role Breadth Provide policy guidance and establish minimum standards for the conduct of Insurance risk management activities throughout the Group; Provide policy guidance and establish minimum standards for the conduct of Investment Risk Management activities throughout the Group; Ensure divisional insurance and investment risk policies are consistent with the principles established in the Group Insurance Risk Policy, the Group Market Risk Policy and the Group Credit Risk Policy; Provide oversight of insurance and investment risk management activities across the Group to ensure that minimum standards are met, including monitoring of aggregate insurance and investment risk at Group wide and regulated entity levels; Monitor compliance with insurance and investment risk management standards and any limits incorporated therein; Provide functional leadership for specialist personnel involved in insurance and investment risk management activities throughout the Group to ensure a professional cadre of risk management personnel operates at high standards throughout the Group; Provide input into the research capability to ensure the Group is kept abreast of the latest insurance and investment risk developments and harness such development for the benefit of the Group; and Provide an independent view on the effectiveness and efficiency of the Group’s insurance and investment risk management arrangements.

Skills required of team members Knowledge of Insurance (Life and General) Good Communication Respect and Acceptance from key (senior) stakeholders Actuarial, but not necessarily qualified

Challenges Explaining market risk and life insurance accounting to bankers Rationalising why Insurance risk metrics are different from banking Persuading divisions to provide information (and access) Not providing an extra source of competent staff for Divisions No models