Huntington National Bank 2014 Annual Report Download - page 22

16
We also must comply with anti-money laundering and customer privacy regulations, as well as corporate governance, accounting,
and reporting requirements.
The USA Patriot Act of 2001 and its related regulations require insured depository institutions, broker-dealers, and certain other
financial institutions to have policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing.
Federal banking regulators are required, when reviewing bank holding company acquisition and bank merger applications, to take into
account the effectiveness of the anti-money laundering activities of the applicants. The Financial Crimes Enforcement Network has
proposed a rule for those same entities, and, if adopted, the proposal will prescribe customer due diligence requirements, including a
new regulatory mandate to identify the beneficial owners of legal entities which are customers.
Pursuant to Title V of the Gramm-Leach-Bliley Act, we, like all other financial institutions, are required to:
x provide notice to our customers regarding privacy policies and practices,
x inform our customers regarding the conditions under which their nonpublic personal information may be disclosed to
nonaffiliated third parties, and
x give our customers an option to prevent certain disclosure of such information to nonaffiliated third parties.
The Sarbanes-Oxley Act of 2002 imposed new or revised corporate governance, accounting, and reporting requirements on us. In
addition to a requirement that chief executive officers and chief financial officers certify financial statements in writing, the statute
imposed requirements affecting, among other matters, the composition and activities of audit committees, disclosures relating to
corporate insiders and insider transactions, code of ethics, and the effectiveness of internal controls over financial reporting.
Available Information
This information may be read and copied at the Public Reference Room of the SEC at 100 F Street, N.E., Washington, D.C.
20549. You can obtain information on the operation of the Public Reference Room by calling the SEC at 1-800-SEC-0330. The SEC
also maintains an Internet web site that contains reports, proxy statements, and other information about issuers, like us, who file
electronically with the SEC. The address of the site is http://www.sec.gov. The reports and other information filed by us with the SEC
are also available at our Internet web site. The address of the site is http://www.huntington.com. Except as specifically incorporated by
reference into this Annual Report on Form 10-K, information on those web sites is not part of this report. You also should be able to
inspect reports, proxy statements, and other information about us at the offices of the NASDAQ National Market at 33 Whitehall
Street, New York, New York.
Item 1A: Risk Factors
Risk Governance
We use a multi-faceted approach to risk governance. It begins with the board of directors defining our risk appetite as aggregate
moderate-to-low. This does not preclude engagement in select higher risk activities. Rather, the definition is intended to represent an
average of where we want our overall risk to be managed.
Three board committees primarily oversee implementation of this desired risk appetite and monitoring of our risk profile: The
Audit Committee, Risk Oversight Committee, and the Technology Committee:
x The Audit Committee is principally involved with overseeing the integrity of financial statements, providing oversight of
the internal audit department, and selecting our external auditors. Our chief auditor reports directly to the Audit
Committee Chair.
x The Risk Oversight Committee supervises our risk management processes which primarily cover credit, market,
liquidity, operational, compliance, legal, strategic, and reputational risks. It also approves the charters of executive risk
management committees, sets risk limits on certain risk measures (e.g., economic value of equity), receives results of the
risk self-assessment process, and routinely engages management in review of key risks. Our credit review executive
reports directly to the Risk Oversight Committee.
x The Technology Committee provides oversight of technology to meet defined standards for risk, security, and Company-
defined targets; and ensure that exposure to security and redundancy risks are defined and transparent and provides
oversight of the Bank’s overall third party relationship risk management process.