Citigroup (C)

MANAGING GLOBAL RISK

        Citigroup's risk management framework balances strong corporate oversight with well-defined independent risk management functions within each business. The Citigroup risk management framework is described in Citigroup's 2005 Annual Report on Form 10-K.

        The Citigroup Senior Risk Officer is responsible for:

•

establishing standards for the measurement and reporting of risk,



•

managing and compensating the senior independent risk managers at the business level,



•

approving business-level risk management policies,



•

reviewing major risk exposures and concentrations across the organization.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, for overseeing the risk in their business, and for responding to the needs and issues of their business.

MANAGING GLOBAL RISK

        Citigroup's risk management framework balances strong corporate oversight with well-defined independent risk management functions within each business. The Citigroup risk management framework is described in Citigroup's 2005 Annual Report on Form 10-K.

        The Citigroup Senior Risk Officer is responsible for:

•

establishing standards for the measurement and reporting of risk,



•

managing and compensating the senior independent risk managers at the business level,



•

approving business-level risk management policies,



•

reviewing major risk exposures and concentrations across the organization.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, for overseeing the risk in their business, and for responding to the needs and issues of their business.

MANAGING GLOBAL RISK

        The Citigroup risk management framework recognizes the diversity of Citigroup's global business activities by balancing strong corporate oversight with well-defined independent risk management functions within each business.

        The Citigroup Senior Risk Officer is responsible for:

•

establishing standards for the measurement and reporting of risk,



•

managing and compensating the senior independent risk managers at the business level,



•

approving business-level risk management policies,



•

reviewing major risk exposures and concentrations across the organization.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, for overseeing the risk in their business, and for responding to the needs and issues of their business.

MANAGING GLOBAL RISK

        The Citigroup risk management framework recognizes the diversity of Citigroup's global business activities by balancing strong corporate oversight with well-defined independent risk management functions within each business. The Citigroup risk management framework is described in Citigroup's 2004 Annual Report on Form 10-K.

        The risk management framework is grounded on the following six principles, which apply universally across all businesses and all risk types:

•

Risk management is integrated within the business plan and strategy.

•

All risks and resulting returns are owned and managed by an accountable business unit.

•

All risks are managed within a limit framework; risk limits are endorsed by business management and approved by independent risk management.

•

All risk management policies are clearly and formally documented.

•

All risks are measured using defined methodologies, including stress testing.

•

All risks are comprehensively reported across the organization.

        The Citigroup Senior Risk Officer is responsible for establishing standards for the measurement, approval, reporting and limiting of risk, for managing, evaluating, and compensating the senior independent risk managers at the business level, for approving business-level risk management policies, for approving business risk-taking authority through the allocation of limits and capital, and for reviewing, on an ongoing basis, major risk exposures and concentrations across the organization. Risks are reviewed regularly with the independent business-level risk managers, the Citigroup senior business managers, and as appropriate, the Citigroup Board of Directors.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, while ensuring consistency with Citigroup standards. As noted above, the independent risk managers report directly to the Citigroup Senior Risk Officer, however they remain accountable, on a day-to-day basis, for appropriately meeting and responding to the needs and issues of their business unit, and for overseeing the risks present.

        The following sections summarize the processes for managing credit, market, operational and country risks within Citigroup's major businesses.

MANAGING GLOBAL RISK

        The Citigroup risk management framework recognizes the diversity of Citigroup's global business activities by balancing strong corporate oversight with well-defined independent risk management functions within each business. The Citigroup risk management framework is described in Citigroup's 2004 Annual Report on Form 10-K.

        The risk management framework is grounded on the following six principles, which apply universally across all businesses and all risk types:

•

Risk management is integrated within the business plan and strategy.



•

All risks and resulting returns are owned and managed by an accountable business unit.



•

All risks are managed within a limit framework; risk limits are endorsed by business management and approved by independent risk management.



•

All risk management policies are clearly and formally documented.



•

All risks are measured using defined methodologies, including stress testing.



•

All risks are comprehensively reported across the organization.

        The Citigroup Senior Risk Officer is responsible for establishing standards for the measurement, approval, reporting and limiting of risk, for managing, evaluating, and compensating the senior independent risk managers at the business level, for approving business-level risk management policies, for approving business risk-taking authority through the allocation of limits and capital, and for reviewing, on an ongoing basis, major risk exposures and concentrations across the organization. Risks are reviewed regularly with the independent business-level risk managers, the Citigroup senior business managers, and as appropriate, the Citigroup Board of Directors.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, while ensuring consistency with Citigroup standards. As noted above, the independent risk managers report directly to the Citigroup Senior Risk Officer, however they remain accountable, on a day-to-day basis, for appropriately meeting and responding to the needs and issues of their business unit, and for overseeing the risks present.

        The following sections summarize the processes for managing credit, market, operational and country risks within Citigroup's major businesses.

MANAGING GLOBAL RISK

        The Citigroup risk management framework recognizes the diversity of Citigroup's global business activities by balancing strong corporate oversight with well-defined independent risk management functions within each business.

        The risk management framework is grounded on the following six principles, which apply universally across all businesses and all risk types:

•

Risk management is integrated within the business plan and strategy.



•

All risks and resulting returns are owned and managed by an accountable business unit.



•

All risks are managed within a limit framework; risk limits are endorsed by business management and approved by independent risk management.



•

All risk management policies are clearly and formally documented.



•

All risks are measured using defined methodologies, including stress testing.



•

All risks are comprehensively reported across the organization.

        The Citigroup Senior Risk Officer is responsible for establishing standards for the measurement, approval, reporting and limiting of risk, for managing, evaluating, and compensating the senior independent risk managers at the business level, for approving business-level risk management policies, for approving business risk-taking authority through the allocation of limits and capital, and for reviewing, on an ongoing basis, major risk exposures and concentrations across the organization. Risks are regularly reviewed with the independent business-level risk managers, the Citigroup senior business managers, and as appropriate, the Citigroup Board of Directors.

        The independent risk managers at the business level are responsible for establishing and implementing risk management policies and practices within their business, while ensuring consistency with Citigroup standards. As noted above, the independent risk managers report directly to the Citigroup Senior Risk Officer, however they remain accountable, on a day-to-day basis, for appropriately meeting and responding to the needs and issues of their business unit, and for overseeing the risks present.

        The following sections summarize the processes for managing credit, market, operational and country risks within Citigroup's major businesses.