Technical Standards for Information Requirements for the Preparation of Resolution Plans

Alameda Juan Pablo II, between 15 and 17 North Avenue, San Salvador, El Salvador. Tel. (503) 2281-8000 www.bcr.gob.sv Page 1 of 22 CNBCR-03/2026 NRSF-05 TECHNICAL STANDARDS FOR THE INFORMATION REQUIREMENT FOR THE PREPARATION OF RESOLUTION PLANS Approval: 03/19/2026 Validity: 04/06/2026

THE COMMITTEE OF STANDARDS OF THE CENTRAL RESERVE BANK OF EL SALVADOR,

CONSIDERING: I. That Article 13, first paragraph, of the Law for the Stability of the Financial System and Deposit Guarantee, establishes that, on a preventive basis, the Superintendence will prepare a Resolution Plan for the subjects of this Law, or at least for each of the entities of systemic importance, taking into consideration different scenarios, among them, that the possible impact on the normal development of their activities is of a collective nature, that it occurs at a moment of general financial instability, or due to factors that could affect the financial system. II. That Article 13, fourth paragraph, of the Law for the Stability of the Financial System and Deposit Guarantee, establishes that the Central Bank, through the Committee of Standards, taking into account international standards, will issue the relevant technical norms regarding the minimum information requirements that entities must submit to the Superintendence for the preparation of Resolution Plans. III. That Article 35, letter d), of the Law for the Supervision and Regulation of the Financial System, establishes that the members of the financial system must adopt and update policies and mechanisms for risk management, including among other actions, identifying, evaluating, mitigating, and disclosing them in accordance with international best practices. In these policies, measures to be adopted to prevent possible non-compliance with regulatory requirements and those to be adopted in the event of having incurred them must be included, defining in both situations the parameters that will guide the action and those responsible for implementing them. IV. That Article 99, third paragraph, letter a), of the Law for the Supervision and Regulation of the Financial System, establishes that it is the responsibility of the Committee of Standards to issue resolutions on the approval of technical norms, instructions, and provisions that the laws regulating the supervised entities establish must be issued to facilitate their application, especially those related to solvency requirements, liquidity, provisions, reserves, classification of risky assets, criteria for establishing the need for consolidation, good corporate governance practices, transparency of information, and on any other aspect inherent to risk management by the supervised entities.

THEREFORE,

Alameda Juan Pablo II, between 15 and 17 North Avenue, San Salvador, El Salvador. Tel. (503) 2281-8000 www.bcr.gob.sv Page 2 of 22 CNBCR-03/2026 NRSF-05 TECHNICAL STANDARDS FOR THE INFORMATION REQUIREMENT FOR THE PREPARATION OF RESOLUTION PLANS Approval: 03/19/2026 Validity: 04/06/2026

by virtue of the regulatory powers conferred upon it by Article 99 of the Law for the Supervision and Regulation of the Financial System,

AGREES to issue the following: TECHNICAL STANDARDS FOR THE INFORMATION REQUIREMENT FOR THE PREPARATION OF RESOLUTION PLANS

CHAPTER I OBJECT, SUBJECTS, AND TERMS

Object Art. 1.- These Standards aim to establish the minimum information requirements that entities must submit to the Financial System Superintendence for the preparation of resolution plans, which may be used in case the subjects obligated to these Standards find themselves in any of the conditions or circumstances established in Article 29, letters a) or b), of the Law for the Stability of the Financial System and Deposit Guarantee.

Subjects Art. 2.- The subjects obligated to comply with the provisions established in these Standards are: a) Banks and branches of foreign banks regulated by the Banks Law; and b) Savings and Credit Societies established according to the Law regulating Savings and Credit Societies; and c) Other banks, regulated according to current Laws.

The application of these Standards is exempted for the Agricultural Development Bank, the Development Bank of the Republic of El Salvador (BANDESAL), and Investment Banks as provided in their special Law.

Terms Art. 3.- For the purposes of these Standards, the terms indicated below have the following meaning: a) Shareholder: Owners of the shares or contributions of the subjects obligated to the application of these Standards. b) Central Bank: Central Reserve Bank of El Salvador; c) Entity: Subject obligated to comply with the provisions established in these Standards; d) Essential or Critical Functions: Those activities, services, or operations whose sudden cessation could cause interruptions in the real economy, financial contagion, or systemic instability. e) Cross-guarantee: Agreement where related entities or belonging to the same conglomerate mutually guarantee their financial obligations, or where a single asset backs multiple loans; f) IGD: Deposit Guarantee Institute; g) Board of Directors: Collegiate body or equivalent body in charge of the administration of the entity, with supervision, direction, and control functions; in the case of Cooperative Associations, it will be the Board of Administration or as defined in its creation Law; h) Law: Law for the Stability of the Financial System and Deposit Guarantee; i) Business Line: A specialization of the business that groups processes aimed at generating products and services to serve a target market segment; j) NIT: Tax Identification Number; k) Resolution Plan: Document containing actions for each of the entities, taking into consideration different scenarios, among them, that the possible impact on the normal development of their activities is of a collective nature, that it occurs at a moment of general financial instability, or due to factors that could affect the financial system. This Plan will contain the resolution actions that the Financial System Superintendence may apply in case the entity finds itself in any of the conditions or circumstances established in Article 29, letters a) or b), of the Law; l) Resolution: Process by which necessary measures are executed so that an entity can exit the financial system in an orderly manner or, if applicable, facilitate the continuity of its essential functions, thereby minimizing the impact on financial stability and economic order, prioritizing the public interest, in accordance with the objectives, principles, and other applicable provisions under the Law; and m) Superintendence: Financial System Superintendence.

CHAPTER II ON RESOLUTION PLANS

Object of the resolution plan Art. 4.- The resolution plan aims to guide the action of the Superintendence to protect public deposits by seeking to maintain the continuity of essential financial services and thus guarantee the stability of the financial system. The resolution plan will contain the resolution actions that the Superintendence may apply in case the entity incurs in any of the situations foreseen in Article 29 of the Law.

Preparation of the resolution plan Art. 5.- The Superintendence will prepare the resolution plans of the entities, for which it will rely on the information required from the entities in Article 6 of these Standards. In accordance with what is established in Article 14 of the Law for the Stability of the Financial System and Deposit Guarantee, the Resolution Plan must not consider at any time state financial support, the provision of liquidity assistance by the Central Bank, nor the contribution of the IGD in excess of the limit of guaranteed deposits.

Information to be submitted by entities to the Superintendence Art. 6.- For the purposes that the Superintendence can prepare the resolution plans, entities must submit to it, at a minimum, the following information: a) Corporate Governance structure and operational structure of the entity, including details of the essential functions performed by each member of the corporate governance at the level of directors, senior management, and heads; b) A detailed description of the entity's cross-border activity, if any; c) A detailed description of the entity's interrelation with other entities in the financial system or other sectors of the economy to identify existing dependency relationships; d) Entities that are part of a conglomerate must identify their interrelations and interdependencies that unite them with the rest of the entities in the conglomerate, particularly on the following topics: i. Personnel, facilities, services, and common or shared systems; ii. Provisions on capital, financing, or liquidity; and iii. Cross-guarantee agreements, reciprocal guarantee agreements, and netting agreements between subsidiaries. e) Description of the entity's business model, main operations of the entity and its business lines, as well as the percentage participation of said operations regarding the main assets and liabilities related to these business lines; f) The NIT and the percentage of voting and non-voting rights of shareholders with participation equal to or greater than 5% of the entities referred to in letters a) and b) of Article 2 of these Standards. For the identification of non-resident or non-domiciled persons, they must present the unique identification number assigned for the Public Register of Shareholders of the members of the Financial System and issuers, in accordance with the fifth paragraph of Article 5 of the "Technical Standards for the Procedure for Information Collection for the Register of Shareholders" (NRP-37); g) A list by hierarchy of creditors, excluding depositors, with a detailed description of the entity's liabilities, containing final natural and legal creditors, with type of liability and whether they are secured, unsecured, and subordinated; h) Description and quantification of derivative and hedging operations; i) A description of the entity's off-balance sheet risks: liquidity, credit, operational, legal, environmental, among others. Also, its possible impact on the main business lines will be included; j) Identification of the entity's main counterparties, such as counterparties that are its main funders, counterparties with whom it has interbank loans, the entity's parent company, among others. An impact analysis of the inability of main counterparties to provide support in a financial crisis situation of the entity must also be included; k) Definition and detail of the services and essential functions for the normal operation of the entity's business and the strategies planned to keep them running in case of financial crisis; l) Identification of each payment, clearing, or settlement system of which the entity is a member or participant, directly or indirectly, including a detail of the transacted volume of its operations and essential functions, and of its main business lines of the entity; m) An inventory and detailed description of the main information management systems, including those intended for risk management, accounting, and notification to users of the entity's services; n) Agreements signed by the entity with third parties that could be rescinded by the Superintendence's decision to apply a resolution measure and if the consequences of said rescission could affect the application of a resolution measure, based on the measures referred to in Article 32 of the Law; o) Detail of the assets that the entity has given as collateral; p) Description of the main and alternate data processing centers and their contingency and business continuity plans; q) Detail of the liabilities of minimum labor obligations established in the Labor Code; and r) Any other information that the Superintendence considers pertinent.

The structure of the data files and the name of the data files to be submitted by entities are contemplated in Annex No. 1 of these Standards. Documentation and information may be presented through the means made available by the Superintendence, which may be electronic. In any case, the deadline referred to in the first paragraph of Article 7 of these Standards will begin to run from the next business day after the documentation and information have been presented.

Art. 7.- Upon receipt of the documentation and information in final form, the Superintendence will proceed to review the corresponding documentation, having twenty business days to pronounce itself on it. If the documentation or information is not complete and in due form, as detailed in Article 6 of these Standards, the Superintendence, in the absence of necessary information, may require the respective entity or entities to present the missing documents within a period of ten business days counted from the day following the notification, a period that may be extended at the request of the entity when there are reasons justifying it. The Superintendence in the same notice will indicate to the entity that if it does not complete the information within the aforementioned period, it will proceed according to what is established in Article 13 of these Standards. If after the analysis of the presented information, the Superintendence has additional observations or when the information presented does not prove sufficient to establish the information intended to be accredited; the Superintendence will notify the respective entity to remedy the deficiencies communicated or present additional information requested. The entity will have a maximum period of ten business days counted from the day following the notification, to resolve the observations or present the additional information required by the Superintendence. In the same notice, the Superintendence will indicate to the entity that if it does not complete the information within the aforementioned period, it will proceed according to what is established in Article 13 of these Standards. The Superintendence may, through a reasoned resolution, extend by up to five more business days the period indicated in the previous paragraph, when the nature of the observations or deficiencies notified so requires.

Extension Period Art. 8.- The entity may submit to the Superintendence a request for extension of the period indicated in the fifth paragraph of Article 7 of these Standards, before the expiration of said period, expressing the grounds on which it is based and proposing, if applicable, the pertinent proof. The extension period may not exceed five business days and will begin from the next business day following the expiration date of the original period.

Suspension of the period Art. 9.- The twenty-day period indicated in the first paragraph of Article 7 of these Standards will be suspended for the days that elapse between the notification of the information request referred to in the second and fifth paragraphs of said article, until the observations required by the Superintendence are remedied.

Submission of the Plan to the IGD and Central Bank Art. 10.- In accordance with what is established in Article 13 of the Law, once the Resolution Plan is prepared, the Superintendence will submit it to the IGD and the Central Bank.

Periodicity of the submission of information to the Superintendence Art. 11.- The entity must submit to the Superintendence the information established in Article 6 of these Standards, with reference to the month of April, no later than the last business day of the month of May of each year or when one of the following changes occurs: a) Changes in ownership and/or share participation from 5% for the entities regulated as referred to in letters a) and b) of Article 2 of these Standards; b) Important changes in the Business Model that imply modifications to its risk level; c) Changes in liquidity limits or indicators or changes in risk methodologies that result in modifications to its risk level; d) Mergers, partial or total portfolio sales; or e) Whenever the Superintendence, based on technical reports, deems it appropriate. For the compliance with this article, the information to be presented will be only that which has undergone modifications or changes.

CHAPTER III OTHER PROVISIONS AND VALIDITY

Technical details of information submission Art. 12.- The Superintendence will send to the entities, with a copy to the Central Bank, the technical details related to the mechanisms for sending the information required in these Standards, which will be communicated within a maximum period of fifteen business days following the entry into force of these Standards. The information requests will be limited to the collection of information as regulated in these Standards.

Sanctions Art. 13.- Non-compliance with the provisions contained in these Standards will be sanctioned in accordance with what is established in the Law for the Supervision and Regulation of the Financial System.

Transitory Art. 14.- Entities will have a period of one hundred thirty business days from the validity of these Standards to submit to the Superintendence for the first time, the minimum information requirements referred to in Article 6 of these Standards. Subsequently, they must submit the information observing what is established in Article 11 of these Standards.

Unforeseen Aspects Art. 15.- Aspects not foreseen in regulatory matters in these Standards will be resolved by the Central Bank through its Committee of Standards.

Validity Art. 16.- These Standards will enter into force from April 6, 2026.

Annex No. 1

Alameda Juan Pablo II, between 15 and 17 North Avenue, San Salvador, El Salvador. Tel. (503) 2281-8000 www.bcr.gob.sv Page 9 of 22 CNBCR-03/2026 NRSF-05 TECHNICAL STANDARDS FOR THE INFORMATION REQUIREMENT FOR THE PREPARATION OF RESOLUTION PLANS Approval: 03/19/2026 Validity: 04/06/2026

INFORMATION TO BE SUBMITTED TO THE SUPERINTENDENCE FOR THE PREPARATION OF RESOLUTION PLANS

Below, the names and structure of the data files to be submitted by entities detailed in Article 6 of these Standards are presented. Table 1. Corporate Governance Functions Objective: Establish the corporate governance and operational structure necessary to identify responsibilities and ensure the continuity of critical functions in resolution scenarios.

Seq Field Description 1.1 Entity Code Unique identifier of the legal entity associated with the critical function (e.g., LEI or other internal corporate code). 1.2 Critical_Function_ID Code assigned to a bank's essential function for identification and traceability purposes in the resolution plan. 1.3 Critical Function Description Description of the activity/service whose interruption or cessation could impact the financial system or the bank's operational continuity. 1.4 Body/Committee Governance body or committee responsible for supervising the critical function and its continuity during contingencies/resolution. 1.5 Responsible_Name Incumbent person (director, head, or designated responsible) in charge of the critical function. 1.6 Position Title of the position associated with the incumbent's responsibility for the critical function. 1.7 Email Institutional email of the incumbent responsible, for contact and coordination purposes in contingency/resolution. 1.8 Phone Number Phone number of the incumbent responsible (institutional or operational contact), for coordination in contingency/resolution. 1.9 Metric Minimum performance indicator (SLA/KPI) associated with the provision of the critical function. 1.10 Max Time Maximum tolerated time of interruption/disruption of the critical function (expressed in hours or equivalent). 1.11 Succession_Plan Identifies who assumes responsibility when the incumbent is not available (succession/backup mechanism). 1.12 Body/Committee Body/committee to which the substitute is linked or from which supervision/decision will be exercised when succession is activated. 1.13 Substitute Position Position of the substitute responsible who will assume the critical function according to the succession plan. 1.14 Email Institutional email of the substitute, for

Annex No. 1

Alameda Juan Pablo II, between 15 and 17 North Avenue, San Salvador, El Salvador. Tel. (503) 2281-8000 www.bcr.gob.sv Page 10 of 22 CNBCR-03/2026 NRSF-05 TECHNICAL STANDARDS FOR THE INFORMATION REQUIREMENT FOR THE PREPARATION OF RESOLUTION PLANS Approval: 03/19/2026 Validity: 04/06/2026