Morgan Stanley

Risk Committee Charter

As of October 18, 2024

Purpose

The Committee is appointed by the Board of Directors to assist the Board in its oversight of (i) the Company’s global enterprise risk management (“ERM”) framework, including the Company’s risk appetite statement, risk tolerance levels and limits (“Risk Appetite Statement”), (ii) the Company’s capital, liquidity and funding planning and strategy, (iii) resolution and recovery planning, and (iv) the independence of the Chief Risk Officer and the Firm Risk Management Department.

Risk assessment and risk management are the responsibility of the Company’s management. The Committee’s responsibility in this regard is one of oversight and review.

Membership

  1. The Committee shall be comprised of at least three Board members appointed by the Board after considering the recommendation of the Governance and Sustainability Committee. Committee members shall meet applicable legal and regulatory criteria. Committee members shall serve at the pleasure of the Board and for such term as the Board determines. The Board shall designate one Committee member, which Committee member shall satisfy applicable independence standards, as the Committee’s chair (the “Chair”).

  2. A majority of the Committee members shall have no material relationship with the Company and shall otherwise satisfy the independence requirements of the Company and the New York Stock Exchange.

Operations

  1. The Committee shall hold regular meetings at least four times per year and report to the Board on a regular basis. Meetings shall include any participants the Committee deems appropriate and shall be of sufficient duration and scheduled at such times as the Committee deems appropriate to discharge properly its responsibilities. The Chief Executive Officer, Chief Risk Officer, Head of Non-Financial Risk, Chief Financial Officer, Chief Legal Officer and Chief Audit Officer shall generally attend all regularly scheduled quarterly meetings of the Committee.

  2. The Committee shall meet, as deemed necessary and appropriate, with management, including the Chief Risk Officer, Chief Financial Officer and Chief Legal Officer, in separate executive sessions.

  3. The Committee shall receive information from, and participate in informal meetings and briefings with, management, including the Chief Risk Officer, Chief Financial Officer, Chief Legal Officer and Chief Audit Officer, as necessary and appropriate between formal meetings of the Committee. Such briefings and informal meetings may be through the Chair or individual Committee members, as appropriate.

  4. The Committee, or the Chair or other individual committee members, may meet with regulators as requested or when determined appropriate, regarding matters applicable to the mandate of the Committee.

  5. The Committee may form and delegate to one or more subcommittees all or any portion of the Committee’s authority, duties and responsibilities, and may establish such rules as it determines necessary or appropriate to conduct the Committee’s business.

  6. The Committee shall have direct access to, and complete and open communication with, the Company’s management, including the Chief Risk Officer and other employees of the Firm Risk Management Department, and may obtain advice and assistance from internal legal, risk or other advisors. The Committee may also retain legal, risk or other advisors.

  7. The Company shall provide for appropriate funding, as determined by the Committee, for the payment of (i) ordinary administrative expenses of the Committee that are necessary or appropriate in carrying out its duties and responsibilities and (ii) compensation to legal, risk and other advisors retained by the Committee.

  8. The Committee shall review and assess its performance annually and report the results to the Board.

  9. The Committee shall review and assess the adequacy of this charter annually and, if appropriate, recommend changes to the charter to the Board.

Authority, Duties and Responsibilities

The Committee shall: 

Oversight of Capital, Liquidity and Funding Planning 

  1. Receive reports, as necessary and appropriate, from management, including the Company’s management-level ERM committees, regarding the Company’s capital planning process.

  2. Review and approve annually, unless reviewed and approved by the Board as a whole, the effectiveness of the Company’s Basel III advanced systems and the Company’s capital planning process. 

  3. Receive reports, at least quarterly, from management regarding the Company’s capital, liquidity and funding strategy and planning, and review steps management has taken to manage capital, liquidity and funding against established risk methodologies, including the liquidity risk tolerance. 

  4. Review and approve annually (and when material changes are proposed), unless reviewed and approved by the Board as a whole, the Company’s significant capital, liquidity and funding policies.  

Oversight of Resolution and Recovery Planning

  1. Receive reports, as necessary and appropriate, from management, including the Company’s management-level ERM committees, regarding the Company’s Title I Resolution Plan and Recovery Plan.

  2. Review and approve, unless reviewed and approved by the Board as a whole, the Company’s Title I Resolution Plan and the Recovery Plan, as necessary. 

  3. Review and approve annually (and when material changes are proposed), unless reviewed and approved by the Board as a whole, the contingency funding plan.

Oversight of Risk Management

  1. Oversee the Company’s global ERM framework and Risk Appetite Statement, including the ongoing alignment of the Risk Appetite Statement with the Company’s strategy and capital plans.

  2. Review and recommend for the Board’s approval annually (and when material changes are proposed) the Company’s Global Risk Management Principles, including the Risk Appetite Statement. Approve or recommend for the Board’s approval the Company’s significant risk governance, risk management and risk assessment guidelines and policies, as appropriate.
  3. Review at least quarterly the significant financial risk exposures of the Company and its business units, including market, credit, model and liquidity risk, against established risk measurement methodologies and the steps management has taken to monitor and control such exposures.

  4. Oversee the Company’s risk identification framework.

  5. Receive reports from the Chief Risk Officer, the Firm Risk Management Department, the Chief Financial Officer and the Treasury Department at least quarterly (and other internal departments as necessary) to fulfill the Committee’s duties and responsibilities.

  6. Receive reports, as necessary and appropriate, from the Chief Audit Officer regarding the results of reviews and assessments of the risk management, liquidity and capital functions.

  7. Receive reports, as necessary and appropriate, regarding significant new product risk, emerging risks and regulatory matters related to the Committee’s authority, duties and responsibilities as set forth in this charter. 

  8. Receive reports, as necessary and appropriate, from management, including the Company’s management-level ERM committees, regarding strategic transactions and investments reviewed.

  9. Receive reports, as necessary and appropriate, on climate risk.

  10. The Chief Risk Officer and Chief Audit Officer each shall have access to communicate with the Committee on any matter relevant to financial risk and other matters relevant to the mandate of the Committee.

Oversight of Risk Tolerance 

  1. Receive, as necessary and appropriate, reports and recommendations from management and the Company’s management-level Firm Risk Committee on risk tolerance.

  2. Oversee the Company’s process and significant policies for determining risk tolerance and review management’s measurement and comparison of overall risk tolerance to established limits.  

  3. As appropriate, confirm risk tolerance levels and limits as set forth in the Company’s Risk Appetite Statement.

Oversight of Regulatory Requirements

  1. Review significant risk management regulatory reports and findings of regulators, as applicable to the mandate of the Committee, including management’s remediation plans and progress against such plans.

Oversight of the Chief Risk Officer and Firm Risk Management Department 

  1. Approve the appointment and, when and if appropriate, replacement of the Chief Risk Officer, who shall report directly to the Committee as well as to the Chief Executive Officer and who shall have qualifications commensurate with applicable legal and regulatory guidance relating to risk management expertise. 

  2. Review and evaluate annually the qualifications, performance and compensation of the Chief Risk Officer.

  3. Review with the Chief Risk Officer the adequacy of staffing and resources of the Firm Risk Management Department.

Coordination with Management and Other Board Committees

  1. Coordinate with management and other committees of the Board (which coordination may be through the committee chairs) to help ensure that the committees have received the information necessary to permit them to fulfill their duties and responsibilities with respect to oversight of risk management and risk assessment guidelines and policies.

  2. Coordinate with the Compensation, Management Development and Succession Committee (which coordination may be through the committee chairs) in relation to that committee’s role with respect to financial risk matters related to compensation.

  3. Coordinate with the Chief Executive Officer and the Compensation, Management Development and Succession Committee (which coordination may be through the committee chairs) in relation to the compensation of the Chief Risk Officer and consideration of risk assessment and risk management matters as they relate to compensation, including ensuring compensation practices are consistent with the safety and soundness of the Company and do not encourage excessive risk taking.

Other Authority 

  1. Make such recommendations with respect to any of the above matters and any other matters as the Committee deems necessary or appropriate.
  2. Have such other authority, duties and responsibilities as may be delegated to the Committee by the Board.