Paul Bianco RIMS CRMP, CCRA

• Responsible for US Risk Management: Lead work efforts and reporting to Board, Committees and Regulators across deliverables and risk categories (insurance, artificial intelligence, legal\compliance, reserving, capital, market\credit, liquidity, operational, strategic, emerging risks) • Own US wide implementation of the Risk Framework: Risk appetite, Policies, Governance, Solvency Plans, ORSA, RCSA, Climate, Business Plan Risk Assessments including Performance Reviews & Underwriting Enablement, Issue\Event Management, Capital Planning • Develop AI Risk Framework and conduct ongoing risk assessments: Use Case Delivery, Governance strategy, KRI Scorecard & Controls • Lead Risk Assessment and Mitigation strategies around market dynamics and events • Lead risk function action planning in response to Employee Survey Results to support long-term employee satisfaction and retention • Assume Group Head of Operational Risk role on interim basis during individual's leave • Ensure alignment of first line practices with corporate culture, values & business objectives via annual Risk Culture Assessment • Manage Corporate & Social Responsibility Connecticut budget and employee volunteering efforts Results: • Top-tier implementation of Enterprise Risk Management to support achievement of corporate strategic imperatives & financial goals

Volunteer firefighter serving the local community Desk Officer - Correspondence Secretary (2019 - 2025)

• Implemented and optimizing risk frameworks and best practices for clients • Lead teams across risk-related initiatives and project work streams including strategic planning, execution, and funding to assess current state and drive future state of operations, governance, risk and compliance functions • Directed engagements on adoption of integrated governance, risk & compliance platforms, and processes to streamline operations Results: • Increased company credibility with clients and requests for proposal leading to new and expanding client relationships and new bookings of $800k in 2022 • Implementation of enhanced operational risk and control environment for major US insurance and banking client

• Provided enterprise risk management advisory services to clients resulting in enhanced risk management capabilities Results: • Increased awareness, adoption and marketing of credible risk management practices by InsurTech clients to support business cases for additional venture capital investment

• Directed teams and performed as an individual contributor across all components of enterprise risk management • Designed and implemented governance charters and committees • Optimized and performed quarterly and annual disclosure & reporting function • Conducted and streamlined operational risk and control annual assessments • Managed implementation and execution of third-party vendor risk management framework and annual assessments • Implemented and performed a US-wide business continuity management resiliency program • Supported operations, cyber defense and information security functions with protocols and risk assessments • Performed emerging risk management assessments and supported associated business planning • Supported internal audit with scoping, coordination, planning and measures management Results: • Best in class enterprise risk management shared services model supporting consistent achievement of financial solvency, credit rating and risk aggregation goals • Effective and efficient approaches to assess and adapt to risks stemming from the external business environment, accounting for business plan performance vs. established financial and operational goals • Efficient approach to assess and react to business headwinds, tailwinds, and performance vs. risk thresholds • Comprehensive operational risk function able to arrive at reasonable residual risk levels and the ability to effectively react to operational risk events and control failures • Streamlined approach and ongoing compliance with federal and state regulations, and internal policies • No significant business downtime nor loss of productivity during COVID-19 pandemic and other operational events • Regulatory compliance and mitigation of operational and reputational risk related to cyber-attacks and data breaches • Ability to capitalize and mitigate risk associated to emerging risks • Strengthened operational and business processes related to top and material risks

Served as unit leader with accountability across various Enterprise Catastrophe Risk Strategy and Analysis teams • Business Consulting Unit: Client Facing Underwriting Review and Enablement o Enabled and provided risk review analytical services in partnership with underwriting and actuarial teams to monitor, analyze trends and capitalize on profitable underwriting business opportunities • Natural Catastrophe & Public Policy Unit: Risk Mitigation and Finance o Managed team responsible for monitoring, generating awareness and influencing business decisions to account for the potential impacts of ongoing developments across coastal legislation, wind pools, public policy, and regulatory changes o Managed building science research partnerships and initiatives including relationships with external business partners o Served on Board of Directors for risk mitigation partnerships and residual markets spanning Alabama, Insurance Institute for Building & Home Safety, Build Strong Coalition, and the internal-facing Climate Energy & Environment Committee o Chaired Natural Catastrophe Public Policy Committee • Catastrophe Metrics Information Management Unit: Operational Risk o Managed in an operationally efficient and risk-controlled processing environment the team of onshore and offshore resources responsible for generating the Enterprise & Business Unit strategic risk reports leveraged to monitor and adapt risk appetite based on risk aggregation levels o Operationalized and optimized risk metric calculation processes and reports around perils, regions & platforms o Published and presented risk content with external audiences including Rating Agencies, Office of Insurance Regulation \ Department of Insurance, Government Affairs Office & National Association of Insurance Commissioners submissions • Project Management Office Unit: Project Risk o Managed teams & portfolio of key strategic projects to inform C-level & Risk Committees on business unit risk

• Established and managed a portfolio of top 25 clients as a trusted advisor resulting in increased licensing and services revenue • Collaborated with sales team by supporting request for proposal responses and leading client presentations resulting in additional license and service revenue • Led initiatives across multiple business units to address client concerns and implement process improvement with RMS models resulting in increased client satisfaction as a foundation for growing licensing and services revenue • Utilized RMS modeled output to guide and assist clients with underwriting business decisions • Participated on future release strategic design panels including managing new model and software change management processes • Established client value propositions related to sharing claims data with the company and advised clients on catastrophe response processes

• Managed and performed RMS software deployment efforts across internal and external teams including environment sizing, resource planning, scheduling, and dependencies