Korven One Risk Management Policy

Korven One is committed to maintaining a comprehensive risk management framework designed to identify, assess, monitor, mitigate, and report risks that may impact customers, partners, operations, financial stability, regulatory compliance, and platform security. This Policy establishes Korven One's approach to enterprise risk management.

This Policy applies to:

• Korven One Operations
• Wallet Services
• Payment Services
• Merchant Services
• Developer Services
• Treasury Operations
• Settlement Operations
• Remittance Services
• Employees
• Contractors
• Third-Party Providers

Korven One aims to:

• Protect customer funds
• Protect company assets
• Support regulatory compliance
• Minimize operational disruption
• Detect and reduce fraud
• Maintain liquidity
• Protect reputation
• Support sustainable growth

Korven One shall maintain oversight of risk management activities. Responsibilities may include:

• Risk Identification
• Risk Monitoring
• Risk Reporting
• Risk Mitigation
• Policy Enforcement

Executive leadership shall maintain overall accountability for risk oversight.

Korven One follows a continuous process:

• Identify Risk
• Assess Risk
• Monitor Risk
• Mitigate Risk
• Report Risk
• Review Risk

Financial risk may include:

• Revenue Loss
• Settlement Errors
• Payment Failures
• Counterparty Exposure
• Unexpected Financial Events

Korven One may implement controls including:

• Financial Monitoring
• Reconciliation Procedures
• Approval Controls
• Reserve Requirements

Fraud risk may include:

• Account Takeover
• Identity Fraud
• Payment Fraud
• Merchant Fraud
• Synthetic Identities
• Insider Fraud

Controls may include:

• Risk Scoring
• Transaction Monitoring
• Fraud Detection Systems
• Enhanced Verification

Operational risk may arise from:

• Human Error
• Process Failures
• Technology Failures
• Vendor Failures
• Service Interruptions

Korven One shall maintain operational controls to reduce disruptions.

Compliance risk may include:

• AML Violations
• KYC Failures
• Regulatory Violations
• Sanctions Exposure

Korven One shall maintain compliance programs designed to reduce regulatory risk.

Liquidity risk refers to the inability to meet financial obligations when due. Korven One shall monitor:

• Available Funds
• Reserve Levels
• Settlement Requirements
• Withdrawal Activity

Liquidity positions should be reviewed regularly.

Treasury risk may include:

• Reserve Imbalances
• Settlement Failures
• Unauthorized Transfers
• Currency Exposure

Korven One shall implement treasury controls including:

• Approval Workflows
• Segregation of Duties
• Audit Logging
• Reserve Monitoring

Cybersecurity risk may include:

• Data Breaches
• Unauthorized Access
• Malware
• Ransomware
• API Abuse
• Infrastructure Attacks

Korven One shall maintain security controls designed to reduce cyber risk.

Korven One may depend on:

• Cloud Providers
• Banking Partners
• Identity Verification Providers
• Payment Processors
• Service Vendors

Third parties may be evaluated based on:

• Security
• Compliance
• Operational Reliability
• Financial Stability

Reputational risk may arise from:

• Security Incidents
• Service Outages
• Fraud Events
• Compliance Failures
• Customer Complaints

Korven One shall seek to maintain customer trust through transparency and accountability.

Strategic risk may arise from:

• Market Changes
• Competitive Pressure
• Technology Shifts
• Regulatory Developments

Korven One may periodically review strategic risks affecting long-term objectives.

Korven One may conduct periodic risk assessments covering:

• Security
• Operations
• Compliance
• Treasury
• Liquidity
• Technology

Assessment results may be documented and reviewed.

Korven One may utilize:

• Risk Dashboards
• Monitoring Systems
• Fraud Detection Tools
• Security Monitoring
• Compliance Reviews

Monitoring may be continuous where appropriate.

Significant risks may be reported to:

• Management
• Compliance Personnel
• Security Teams
• Executive Leadership

Reporting procedures may vary based on risk severity.

Risks may be escalated when:

• Financial Exposure Increases
• Customer Impact Increases
• Compliance Concerns Arise
• Security Risks Increase

Escalation procedures shall be documented.

Korven One shall maintain controls including:

• Segregation of Duties
• Approval Requirements
• Access Controls
• Audit Logs
• Monitoring Systems

Internal controls shall be reviewed periodically.

Korven One seeks to maintain a conservative risk posture regarding:

• Customer Funds
• Regulatory Compliance
• Treasury Operations
• Security Controls

High-risk activities may require enhanced review or approval.

Employees may receive training regarding:

• Risk Management
• Fraud Prevention
• Security Practices
• Compliance Requirements

Violations of this Policy may result in:

• Access Restrictions
• Disciplinary Action
• Contract Termination
• Legal Action

where appropriate.

This Policy shall be reviewed periodically to ensure continued effectiveness. Updates may be implemented based on:

• Operational Experience
• Regulatory Changes
• Risk Assessments
• Security Developments

Korven One Risk Management Team

Email: risk@korvenone.com

Email: compliance@korvenone.com

Support: support@korvenone.com

Website: https://korvenone.com

The official version of this Risk Management Policy is the English version. Translations may be provided in:

• Haitian Creole
• French
• Spanish

In case of conflict, the English version shall prevail.