Banco Santander SA (SAN) Risk Analysis

Risk management is an integral part of our activities. We seek to monitor and manage our risk exposure through a variety of separate but complementary financial, credit, market, operational, compliance and legal reporting systems, among others. While we employ a broad and diversified set of risk monitoring and risk mitigation techniques, such techniques and strategies may not be fully effective in mitigating our risk exposure in all economic market environments or against all types of risk, including risks that we may fail to identify or anticipate. Some of our tools and metrics for managing risk are based upon our use of observed historical market behaviour. We apply statistical and other tools to these observations to arrive at quantifications of our risk exposures. These tools and metrics may fail to predict future risk exposures. These risk exposures could, for example, arise from factors we did not anticipate or correctly evaluate in our statistical models. This would limit our ability to manage our risks. Thus, our losses could be significantly higher than the historical measures indicate. In addition, our statistical models may not take all risks into account. Our approach to managing risks could prove insufficient, exposing us to material unanticipated losses. We could face adverse consequences as a result of decisions, which may lead to actions by management, based on models that are poorly developed, implemented or used, or as a result of the modelled outcome being misunderstood or the use of such information for purposes for which it was not designed. If existing or potential customers or counterparties believe our risk management is inadequate, they could take their business elsewhere or seek to limit their transactions with us. Any of these factors could have a material adverse effect on our reputation, operating results, financial condition and prospects. As a retail bank, one of the main types of risks inherent in our business is credit risk. For example, an important feature of our credit risk management system is to employ an internal credit rating to assess the particular risk profile of individual customers and SMEs. As this process involves detailed analyses of the customer, taking into account both quantitative and qualitative factors, it is subject to human or IT systems errors. In exercising their judgement on current or future credit risk behaviour of our customers, our employees may not always be able to assign an accurate credit rating, which may result in a higher exposure to credit risks than indicated by our risk rating system. Some of the models and other analytical and judgement-based estimations we use in managing risks are subject to review by, and require the approval of, our regulators. If models do not comply with all their expectations, our regulators may require us to make changes to such models, may approve them with additional capital requirements or we may be precluded from using them. Any of these possible situations could limit our ability to expand our businesses or have a material impact on our financial results Failure to effectively implement, consistently monitor or continuously refine our credit risk management system may result in an increase in the level of non-performing loans and a higher risk exposure for us, which could have a material adverse effect on us. Our board of directors is responsible for the approval of the Group’s general policies and strategies, and in particular for the general risk policy. In addition to the executive committee, which maintains a special focus on risk, the board has a specific risk supervision, regulation and compliance committee. See more information in section 2.3 ‘Risk and Compliance governance’ in the Risk management and compliance chapter and in section 4 'Board of directors' in the Corporate governance chapter in Part 1 of this annual report on Form 20-F.