Building a Cyber
Safe World
2020 Corporate
Responsibility Report
01

Introduction

05

Approach

11Your Information

13

Communities

18

Environment

20

Our People

26

Performance Data Table

30

GRI and SASB Index

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEXAt NortonLifeLock, we are committed to providing every
consumer and citizen with solutions to live their digital lives
safely and privately. We strive to be a trusted partner thathelps people secure their devices, identities, online privacy,
and connected homes and families. Currently, we provide
approximately 50 million people better control of theirdigital lives.
The digital world has changed the way we live our lives
every day. From work and school to the way we socialize
with family and friends, our digital lives are front and center.
These new technologies, smart devices, and an increasinglyconnected world also mean people will encounter a range
of vexing new cybersecurity and privacy challenges. In the
United States, someone falls victim to identity theft every
three seconds and our recent survey of 10 countries foundthat 350 million people were victims of cybercrime in thelast year alone.

Letter fromVincent Pilette

Our experience with COVID-19 has only accelerated thistransformation. Ransomware, identity and data scams,
and cyberattacks are stronger than ever as cybercriminals
capitalize on the pandemic and these new trends. In
response to the pandemic’s impacts, we offered a
6-month complimentary subscription to Norton Family tohelp parents monitor and manage their children’s online
activities and continued to publish free resources, including
how to protect yourself from phishing scams and keep
connections secure when working remotely.
The health and safety of our global team remains a toppriority. Since March 2020, we’ve asked all employees who
are able to work from home to do so. We’ve implemented
rigorous safety protocols for team members working
on-site including physical distancing measures, providing
hand sanitizer and wipes, and more frequent cleaning of
offices. We also donated $100,000 to the United Nations
Foundation’s Solidarity Response Fund and an additional

INTRODUCTIONTABLE OF CONTENTSAPPROACH INTRODUCTIONYOUR INFORMATIONAPPROACH

COMMUNITIESDATA PRIVACY$146,000 through employee donations and a 2:1
corporate match to COVID-19 relief efforts.
NortonLifeLock’s transition to a pure play company
dedicated to consumer Cyber Safety on November
4, 2019, enabled us to reaffirm that corporate
responsibility and positive social impact are core to
our business strategy. Our position as a global leader
depends not only on our technology, but on our values
as an ethical company that operates with integrity andaccountability in everything we do.
Our company values include treating each memberof our community with respect, challenging ourselves
to be curious, and celebrating diversity as a driver ofinnovation. We donate products to help protect people,
work to increase digital safety literacy, and focus on
minimizing our environmental footprint. I’m proud of
all that we’ve accomplished to date, including:
Education and training: Helping people keep theirhome and family Cyber Safe means giving them thetools and know-how to take charge of their digital
lives. Through our partnership with the National Parent
and Teacher Association (PTA), we created The Smart
Talk, an interactive tool that encourages children andtheir caregivers to set tech ground rules together. In
FY20, 160 PTAs across the U.S. held a Safer Internet
Day event focused on The Smart Talk.
Product donation: In FY20, our products helped morethan 14,600 nonprofits and public libraries keep theirdevices and data secure. These product donations,with a retail value of nearly $11 million, enablenonprofits to spend less time responding to malware
attacks and more time helping their communities
thrive.

ENVIRONMENTCOMMUNITIESENVIRONMENTOUR PEOPLE

Environmental stewardship: In FY20, we started
work to refresh our greenhouse gas emissions
strategy and goals, continued to use Forest
Stewardship Council certified paper in our productpackaging, and engaged our employees in a
campaign focused on environmental awareness andaction.
Diversity, equity, and inclusion: Along with industry
peers, we are working to increase the representationof women and underrepresented minorities intechnology. We recently relaunched our employee
resource groups called Communities, and continued
to fund nonprofits focused on diversifying tech,including Reboot Representation and NPower.
We recently updated our Code of Conduct andreaffirmed our commitment to the United Nations
Global Compact (UNGC), and its 10 principles related
to protecting human rights and the environment, andcombating corruption.
In 2021, we will continue to build on our positive
impact and the commitments we’ve made to ourcustomers, stakeholders, and the world we live in.
Our mission is at the core of our social responsibility,
making the world Cyber Safe.

Vincent PiletteChief Executive Officer, NortonLifeLock

PERFORMANCEOUR PEOPLE DATA TABLE DATA TABLE
GRI AND SASB INDEXGRI AND SASB INDEX

1

People’s digital lives have exploded in recent years,

Governance Committee of our Board of Directors

and partner with Year Up, NPower, and Nasscom,with research showing that in the U.S. there are

has oversight of corporate responsibility issues

organizations working to increase the number ofapproximately eight networked devices per person.

and receives quarterly updates on topics such as

women, minorities, and veterans in the global techWith each of these “smart” devices—phones,

diversity, ethics, and community investment.

talent pipeline and workforce.

The very nature of our business—helping protect

As we look to 2021, we are excited to deliver on

all areas of consumers’ online lives—also requires

our vision to be the trusted brand in Cyber Safety

a global culture of responsibility. This culture isby protecting consumers and giving them control

realized in the positive contributions we makeof their digital lives.

tablets, laptops, watches, in-home speakers,
thermostats, cameras, and more—comes the needfor comprehensive products and services for Cyber
Safety, which NortonLifeLock delivers better thananyone else.

to the customers, employees, communities,

Great leaders enable growth, and this year, wehave assembled a world-class consumer-oriented
leadership team. This team is already building
velocity with new product innovation, partner
launches, and a growing customer count for the firsttime in over five years. As an example, BotSight, afree tool recently released by NortonLifeLock Labs,

Letter fromSue Barsamianuses machine learning to identify bots in Twitter
feeds and fight the spread of disinformation. Anotherproduct, Privacy Monitor Assistant, helps enable our

These contributions include providing employment

Board Member and Nominating and GovernanceCommittee Chair, NortonLifeLock

opportunities for female engineering graduates
in India, helping protect the identities and dataof women building peace in their communities,
taking a stand against stalkerware and domestic
violence, investing in STEM education, piloting
virtual volunteerism, and supporting diversity andinclusion.
We know strong teams are formed throughfrom idea to market in just 30 days.

combinations of people with different skill sets

valuable asset—personal information—and ethicalconduct and integrity are the building blocks of ourbusiness success. This commitment is realized inpart through good governance. The Nominating and

APPROACH

Sue Barsamian

customers to protect their own privacy and went

NortonLifeLock’s customers trust us with their most

INTRODUCTION

shareholders, and stakeholders that we serve.

YOUR INFORMATIONCOMMUNITIESand perspectives. The relaunch of employee
resource groups this year is an important stepin encouraging employees to connect, learn,
support, mentor, and appreciate one another’s
diverse contributions. We’re also proud to fund

ENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

2

About NortonLifeLock Inc.

Launched

NOVEMBER 4, 2019

Headquarters

TEMPE, ARIZONA, USA

Net Revenue

Employees

2.5WORLDWIDE 2,500

SectorTECHNOLOGYBILLION

Nearly 500 million
people across 10
countries havebeen a victim ofcybercrime*1

Approximately 50
million consumers
globally areprotected by
NortonLifeLock

Nearly 46 million
consumers were thevictims of identity
theft last year*

NortonLifeLock.com
1

Based on an online survey of 10,063 adults in 10 countries conducted by The Harris Poll on behalf of NortonLifeLock, November - December 2019.

* Source: 2019 NortonLifeLock Cyber Safety Insights Report

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

3

Our vision is to be the trusted brand in Cyber Safety by protecting
consumers and giving them control of their digital lives.
About NortonLifeLock Inc.
NortonLifeLock Inc. (NASDAQ: NLOK) is a global leader in consumer Cyber Safety. We are dedicated to helping secure the devices2, identities, online privacy,
and home and family needs of approximately 50 million consumers in over 60 countries. Bringing together decades of experience in cybersecurity andidentity theft protection, we provide consumers with comprehensive protection and a trusted ally in a complex digital world.

Device Security

Identity Theft Protection

Multi-layered advanced security
helps protect your devices andinformation from online threats likeviruses, malware, and phishing.

We monitor for threats to youridentity and provide restoration
services to help if you do havean identity theft issue.

Online Privacy

Home & Family

Virtual private networking helps
protect your privacy when information is
being sent or received over Wi-Fi,
wired, or mobile connections.

2

2

We help families enjoy connected
devices worry-free with solutions
like Parental Controls.

Devices includes computers, smartphones, and tablets.

Devices includes computers, smartphones, and tablets.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

4

Our approach
COVID-19 response
We are living in an unprecedented time of uncertainty
as the coronavirus pandemic has impacted our daily
lives, the global economy, and human health aroundthe world. The pandemic has unfortunately created anincrease in ransomware, scams, and cyberattacks, and
our Cyber Safety products and services are more vitalthan ever before.
The health and safety of our employees andcustomers remains our top priority. We are committed
to doing our part to respond to the impacts of
COVID-19 in a variety of ways:• Requiring all employees who are able to work fromhome to do so.
• Increasing safety protocols and following CDC safety
guidelines to help protect team members in theoffice.

protect individuals from phishing scams related to
COVID-19, and help keep connections secure whenworking remotely.
• Contributing $100,000 to support the global
response to COVID-19 through a donation to theUnited Nations Foundation’s Solidarity Response
Fund.
• Creating a special 2:1 matching gift opportunity
for employees wishing to maximize their personal
donations, which resulted in sending an additional$100,000 to nonprofit organizations responding to
the pandemic.
• Offering virtual volunteering opportunities toencourage employees to continue to support
organizations including Team Everest, Dublin
Simon, NPower, Year Up, and the Boys & Girls
Clubs.

• Offering a 6-month complimentary subscription to
Norton Family, launched in April, to help families staysafe as they adjusted to working and learning fromhome.

• Granting our entire company a well-deserved day
off on August 14, 2020, in gratitude and as anopportunity for our team to rest and be with family.

• Issuing simple and free guidance to help families
monitor and manage children’s online activities, help

As the pandemic continues, we will stay focusedon what we can do to support our customers, ourcommunities, and each other.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

5Commitment to corporate responsibility
NortonLifeLock’s commitment to corporate

corporations should play in advancing andresponsibility is a critical anchor of ouraddressing social and global challenges. FY20

company’s mission and operating philosophy.

was also a rebuilding year for our company andWe bring together our people, expertise, andwe emerged with a new consumer-focused

powerful technology to support social andmission, new headquarters, new leadership, andenvironmental priorities that foster a safer

new teammates.

and more sustainable future for people, theirpersonal information, and the digital world.

We looked inside our company–at the unique
impact we can make on the world as we protect
consumers’ digital lives, at the social andenvironmental impacts we can manage, at theissues our stakeholders care most about–and
outside our company at the opportunities to

Our Corporate Responsibility team used thisyear to reevaluate and evolve our commitments

Events of the past six months have tested

to better align with our new, more focusedcompanies in a number of ways and changed

business and our current business priorities.

help the world address growing risks. You will
see this process reflected in the new corporate
responsibility strategy we will announce in FY21
and in our newly released objectives.

mainstream discourse about the role

Corporate responsibility
objectives
Data Privacy and Protection– Objective: Establish NortonLifeLockas a thought leader in online privacy
protection practices.

Education and Training

When NortonLifeLock transitioned to a standalone company last year, we saw an opportunity to evolve and build
upon our commitment to corporate responsibility. At the same time, companies were confronted with issues that

– Objective: Leverage NortonLifeLock’s
leading expertise and technology in
Cyber Safety to protect communities.

Diversity, Equity, and Inclusion

positive societal impact, and to being responsive to our employees, consumers, and communities. With that in mind,– Objective: Develop partnerships andinvestments to support diversity insideand out of NortonLifeLock.

we donated $100,000 to the National Urban League, which works to help African Americans and other underserved

Talent Development and Engagement

were urgent and sensitive to address, such as racial injustice and the COVID-19 pandemic. While we don’t have all theanswers, we remain committed to building an inclusive and diverse workforce, to bettering the planet, to generatingurban residents secure economic self-reliance, parity, power, and civil rights. Through our commitment to corporate
responsibility we are working to create a future we all can feel safe and secure in.”
– Kim Allman, Head of Corporate Responsibility and Government Affairs, NortonLifeLock– Objective: Drive corporate responsibility
initiatives to support a culture ofcommunity involvement.

Climate and Energy– Objective: Establish NortonLifeLock as anenvironmentally responsible business.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

6

Corporate responsibility process
NortonLifeLock’s corporate responsibility business process is based on
stakeholder input and tied to our corporate values and priorities

Corporate Responsibility Reporting
and Communications

Supporting The United Nations

Partnerships Across Our Business (People & Culture,
Workplace Solutions, IT, Product, Procurement)

As a signatory to the United Nations(UN) Global Compact, we continue
to support their ten principles andthis report serves as our annual

Stakeholder Engagement, External
Memberships and Partnerships

Board OversightCommunication on Progress (CoP).
We also support the UN Sustainable
Development Goals (SDGs) andrecognize the opportunity to alignour core business capabilities with

Corporate Responsibility Program
Performance Measurement

Prioritizing Strategic Focus Areas

society’s most pressing needs. We
provide metrics and highlights toquantify and illustrate our impact
and contributions to the SDGs (Seeour SDG Highlights on page 25).

Corporate Responsibility Program
Implementation

INTRODUCTION

APPROACH

Corporate Responsibility Goal Setting

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

7

Corporate responsibility leadership andgovernance
Leadership for corporate responsibility comesfrom the top. The Nominating and GovernanceCommittee of our Board of Directors has
oversight of corporate responsibility issues,
and receives quarterly updates on topics
such as diversity, ethics, and community
investment.
Our Head of Corporate Responsibility serves as
the central coordinator for all of our corporate

responsibility efforts, helping set the strategic
agenda and developing specific programs andinitiatives. The Corporate Responsibility teammanages these programs and we engage
NortonLifeLock employees through several
internal and external channels designed tofoster a community and promote a culture of
responsibility.

Ethics and compliance
NortonLifeLock is committed to conducting
our business in an ethical and lawful manner.
Our reputation is a valuable business asset,
and ethical and legal conduct at all levels ofour business is essential for our continued
success.
The NortonLifeLock Code of Conduct aligns
our business practices with our values anddefines what we expect of all directors,
officers, employees, interns, and contractorsof NortonLifeLock, as well as third parties
acting on behalf of the company. It is offered infour languages (English, French, German andJapanese).

INTRODUCTION

APPROACH

As part of our Code of Conduct, employees
must follow NortonLifeLock’s Information
Security Policy and Standards. In FY20, weoffered security trainings, including Securefrom the Start and our annual Security
Awareness training, as well as ethics trainings
relating to our Code of Conduct, Global
Trade Sanctions, Creating a HarassmentFree Workplace, and Preventing Sexual
Harassment. Employees can also report any
ethical concerns to our EthicsLine.

Our position as a global leader in
consumer Cyber Safety depends on morethan our technology—it relies on our
reputation as an ethical company, one that
consumers can trust with their information
because we operate with integrity andaccountability in everything we do.”– Vincent Pilette, CEO, NortonLifeLock

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

8

Prioritizing our corporate responsibility efforts
We conduct a formal materiality analysis, a process to identify environmental, social, and governance (ESG) issues which could impact the business andour stakeholders, every three to five years. We conducted our most recent materiality analysis in August 2020. The materiality process is based on the
Global Reporting Initiative’s (GRI) Principles for Defining Report Content and is conducted in partnership with a third-party consultant. The materiality
process includes research, surveys, interviews, and analysis. Key steps include:

1

2

3

4

5

Defining a list of
ESG issues forconsideration

Analyzing external
stakeholder concerns

Assessing the issues
and drivers with themost and least impact
on the company

Merging stakeholder
concern and business
impact to chartmaterial issues

Testing and refining
the outcomes withstakeholders

The priority issues that resulted fromour 2020 materiality analysis are:Education andTraining

Engaging our stakeholders
NortonLifeLock has identified stakeholders as groups or individuals with an interest in or concern with our business. We also consider those our business
effects in various ways. Engaging our stakeholders—employees, investors, customers, communities—provides us with insight into shifting external
expectations and informs our decision-making with regard to our corporate responsibility strategy.

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLE

Diversity, Equity, andInclusion

Talent Development andEngagement

We use the outputs of this analysis, as well as ongoing engagement with our customers, employees, communities, shareholders, and stakeholders
to determine our priority corporate responsibility issues and guide our corporate responsibility strategy and disclosures, including this report. Our
corporate responsibility efforts are organized into three pillars, Our People, Your Information, and The World.

INTRODUCTION

Data Privacy
and Protection

PERFORMANCE DATA TABLE

Climate andEnergyGRI AND SASB INDEX

9

FY20 impact at a glance$13M

18,726

14,67831%

IN CHARITABLE
GIVINGEMPLOYEEVOLUNTEER HOURSNONPROFITS RECEIVED
SOFTWARE DONATIONGLOBAL GENDER
DIVERSITY

ZERO

$1M

223K

112K

DETECTIONS
OF MALICIOUS
STALKERWAREPEOPLE USED THE
COMPLIMENTARY
6-MONTH NORTON FAMILYSUBSCRIPTION DURING
COVID-19

CYBERSECURITY
BREACHESVALUE OF CYBERAND ONLINESAFETY GRANTS

2020
RECOGNITION:

NortonLifeLock is a trusted brand that brings peace of mind to millions of consumers and their digital lives. We are also a
new brand and with that comes new opportunity; we get to decide who we are. And we believe that corporate responsibility
isn’t a separate initiative, but intimately tied to our company mission and goals. Being a leader in ethics, transparency, andsocial impact are crucial to a brand centered on trust and will help us make deeper connections with our customers, bothcurrent and new.”– Krista Todd, Vice President of Marketing and Communications, NortonLifeLock

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

10Your Information#NortonLifeLockCares about data privacy
and protection
We believe that information privacy and data protection is a critical elementof corporate responsibility for every company. NortonLifeLock is committed
to safeguarding our customer, partner, and employee data as well as
offering products that help consumers protect their own personal data
wherever it lives.

NortonLifeLock Privacy Operating Model (POM)
Global Head of Compliance

Oversight

EMEA Data Protection Oversight Committee
3rd Lineof Defense

EMEA Data Protection Officer

Privacy excellence

Global Ethics & Compliance Steering Committee

Following our corporate transition this past year, we have evolved our
privacy program to suit the needs of our consumer-focused business.
A key part of protecting our customers’ digital lives is ensuring theirinformation is safe when we collect and use it. Our “privacy by design”
framework guides our approach to privacy when designing our products.
NortonLifeLock’s Privacy Principles outlined in our Code of Conductdetail how employees are required to manage and protect customer data.
Launched in FY19, our Privacy Operating Model (POM) guides privacy
governance. The POM is based on a “three lines of defense” model andassures proactive governance and accountability at all levels of thecompany. In FY20, the model was updated to reflect NortonLifeLock’s
smaller–and consumer-focused–organization, including adding
Operational Privacy Compliance functionality to the model.
As a smaller organization, we’ve also seen substantial value in the ability
to increase and deepen our cross-functional collaboration. In FY20, welaunched our #ask-privacy-legal employee Slack channel and beganbuilding out the Privacy Business Lead program to bring privacy guidance
in at every level of the business.

INTRODUCTION

APPROACH

YOUR INFORMATION

Privacy Legal Lead

2nd Lineof Defense

1st Lineof Defense

ProgramManagement

EMEA Counsel
Coverage HR, GCS,
IT, Finance

US Counsel
Coverage Marketing,
Product + Sales,
SupportHR
Privacy
Lead

MarketingPrivacy
Leads

GCS/IT
Privacy
Leads

Finance
Privacy
Lead

Product/
Sales
Privacy
Leads

SupportPrivacy
Leads

Privacy Operational Compliance Lead - Tempe

CIAs

3rd
Party
Risk
Mgmt

Data
Mapping

DSRs/ DPIA

ROPAs

Cookie &Consent
Monitoring

Privacy Incident
Response Management& Regulatory
Engagement Lead

Incident Response
PMO
Operational Compliance
Privacy Legal

Policy Management, Processes/Controls, Consumer Escalations, Audit Support, Vendor Management, Reporting/Metrics,
Project Management, Employee Trainings, Communications & Awareness Program Manager

The Privacy Operating Model (POM) incorporates every level of the organization worldwide.
For more information on Privacy at NortonLifeLock visit: https://www.nortonlifelock.com/privacy

COMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

11

Privacy compliance

Empowering consumers

Product innovation

From the European Union’s General Data
Protection Regulation (GDPR) to California’s
Consumer Privacy Act (CCPA), NortonLifeLockis committed to complying with applicablelegal requirements, and advancing thediscussion of data privacy.

In addition to protecting our customers’
and employees’ data, we want to empower
consumers to protect their privacy online
and in their daily lives. For example, ournewly launched Privacy Monitor Assistantprovides greater control over online privacy
by scanning popular sites for personal
information to allow individuals to opt-out.

As cyberthreats evolve, we are focused ondelivering a portfolio that protects each aspectof our customers’ digital lives. To do this, weembrace innovation and have developed a global
research and development strategy across our
Cyber Safety platform. Our Engineering and
Product Management teams are focused ondelivering new versions of existing offerings, aswell as developing entirely new offerings to drive
the company’s global leadership in Cyber Safety.

Read more in Public Policy.

Transparency
We provide a Global Privacy Statement to
explain our personal data processing practices(including collection of personal data,
individual privacy rights, referrals/marketing,children’s privacy, and more). We also provide
Product and Service Privacy Notices to explainin detail how data is collected and used by our
products. This transparency allows customers
to better understand how we collect, use, andstore their personal data. We strive to be asaccessible as possible with our customers
and make privacy-direct contact information.
available within our public privacy statement

Norton™ Secure VPN helps secure private
information like passwords, bank details,
and credit card numbers when using public
Wi-Fi and Norton™ Privacy Manager helps
consumers manage and control personal
information and credentials used to accesswebsites and online accounts.
Additionally, we continue to offer free
guidance and education on online privacy
to everyone from school-aged children to
university students and professionals. Our
Internet Security Center includes the latest
threat news and expert articles on malware,
privacy, online scams, digital safety forchildren, identity theft, and more.

We have a technology research organization
focused on applied research projects, with thegoal of rapidly creating new products to address
consumer trends and grow the business,
including defending consumer device security,
identity protection, digital privacy, and homeand family safety. Our team includes engineers,technology research experts, and leading
threat and security researchers supported byadvanced systems, to continually innovate andcreate new products protecting our customers
against known and emerging threats.
Read more about our innovative antistalkerware product in The World.

Whether you’re a gamer like me or a parent of a gamer, also like me, there are inherent cyber risks in joining multi-player
games with internet strangers. The best way to fight cybercriminals is through education and that can start at any age.
While our new Norton 360 for Gamers includes protection against viruses, malware, webcam take-overs, and more, we
are also working with parents, caregivers, and teachers to help teach kids how to stay safe while gaming and to own
their own Cyber Safety.”

INTRODUCTION

APPROACH– Robert Shaker II, Head of Gaming, NortonLifeLock

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLE

NortonLifeLock Global Privacy
Policy Principles
Lawfulness, Fairness, and Transparency
NortonLifeLock only processes Personal
Data in a way that is lawful, fair, andtransparent.

Purpose Limitation

We only collect Personal Data for specified,clear, and legitimate purposes, and we only
collect as much Personal Data as we needto achieve those purposes.

Data Minimization

We process Personal Data is that is
adequate, relevant, and limited to what isnecessary for the purposes for which it iscollected.

Accuracy

We strive to ensure that the Personal
Data we hold is accurate, up-to-date, andcomplete.

Retention

We only retain Personal Data in an
identifiable form for as long as is necessary
for the purposes for which we are using it.

Security

We use appropriate technical andorganizational measures to keep Personal
Data secure and to protect its integrity,
confidentiality, and availability.

Data Accountability

We are each accountable for upholding theData Protection Principles and respecting
individuals' privacy rights.

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

12

The World
Helping to keep families Cyber Safe
Parents and caregivers in 2020, dealing
with virtual school and increased online
interactions, are facing ever-expanding online
dangers. In response, we offered a 6-monthcomplimentary subscription to Norton Family,
which was activated by 112,000 people.
Just a few months later, we further improved
Norton Family with the addition of School
Time, a new Parental Control feature thatallows access to distance learning content,
without giving access to the broader web.
We also partner with National Parent Teacher
Association (PTA) and together created The
Smart Talk, a free, fun, interactive resource thatbrings caregivers and kids together to createtech ground rules. In February and March of2020, 160 PTAs across the U.S. held a Safer
Internet Day event centered around The Smart
Talk, reaching 6,600 people.
READ MORE

Increasing diversity in techDonating products to help nonprofits

Our work with NPower and Year Up, which
offer cybersecurity training and internships forunderserved minorities, women, and veterans,
centers around creating a more diverse
technology workforce. Since Symantec began
the program in 2014, 981 students, like Avneet
Hall and Anthony Plummer, have graduatedthrough all of our nonprofit partner training
programs, an 80.8% graduation rate. Of
these graduates, 71%–699 people–were hiredby a company or chose to pursue additional
education within six months of graduating.

From small public libraries that sponsor
literacy programs to food banks feeding thehungry, nonprofit organizations worldwide
face rising demands on their services.
Compounding the issue is their lack ofresources to secure employee and volunteer
digital information. NortonLifeLock’s
software donation program exists to help
these organizations stay safe online in an
increasingly interconnected world.

In FY20, we also made a three-year commitment
to support the Reboot Representation Tech
Coalition, which is committed to doubling thenumber of Black, Latinx, and Native American
women graduating with computing degrees by2025, and funded all 12 U.S. AAUW (American
Association of University Women) Tech Trek
camps offering a cybersecurity curriculum tohelp girls explore their interests in STEM.

We give product directly to nonprofits thatneed it and partner with TechSoup, which
offers heavily discounted technology solutions
for changemakers. Through these avenues, in
FY20, NortonLifeLock products helped morethan 14,600 nonprofits and public libraries
keep their devices and data secure. These
product donations, with a retail value of nearly$11 million, enable nonprofits to spend lesstime responding to malware attacks and moretime helping their communities thrive.

READ MOREINTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIES#NortonLifeLockCares aboutcommunities
We are proud to support thecommunities where we live and work.
We do this by leveraging our expertiseand industry-lauded products to reachvulnerable and underrepresented
people; investing our resources where
we can have the greatest impact;
collaborating with high-impact, trusted
nonprofit organizations; and activating
our employee base.
From helping to keep families Cyber
Safe to donating nearly $11 million
in products to securing the data anddevices of nonprofits and public
libraries, this section includes notablecommunity initiatives and impact.

READ MORE
ENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

13

The World

Protecting the sensitive data of womenpeacebuilders
One significant challenge womenpeacebuilders face is the threat to theirfamilies, as their work can challenge existing
power structures. NortonLifeLock responded
to a call from The Kroc Institute for Peace
and Justice at the University of San Diego tohelp protect these courageous women online.
As part of our FY21 pilot, we provided Cyber
Safety training to 15 women peacebuilders,
empowering them with the knowledge theyneed to protect their identities, sensitive data,
and their lives. The pilot showed the collective
level of knowledge among peacemakers
doubled from just one training and thewomen also received free Norton™ 360
Deluxe licenses and Norton™ Secure VPN
products to help protect their digital identities.
We plan to extend this program to reach more
women in FY21.

Making an impact in India

Helping girls Surf Smart

In FY20, we made numerous grants in India to theorganizations Symantec had supported for many
years. Based on input from our partners SoStakes
and CAF India, as well as our India-based
employees we chose to support Save theChildren’s Technology Enabled Learning program,
Ashoka Trust and Research in Ecology and The
Environment, the Agastya iMobile Program, and
SayTrees efforts to plant trees.

NortonLifeLock supports the World
Association of Girl Guides and Girl Scouts(WAGGGS) with online safety education. The
partnership began in 2012 when Symantec
created the Surf Smart curriculum. Since
2012, Surf Smart has been delivered tomore than 300,000 children across Europe,Asia, Africa, and the Western Hemisphere,
providing them with the skills and knowledge
needed to safely navigate online spaces.

Through our partnership with the Nasscom
Foundation, we launched the Cyber Security
Skills Development Initiative for Women, whichhelps create greater employability opportunities
for underprivileged female engineering graduates.
The initiative, conducted in Bangalore, Chennai,
and Pune in January and February of 2020,
trained 121 women, and 109 women secured
the Certified Ethical Hacker certification. To
date, 11 women from the program, including
Adeeba Sultana, have been placed into jobs.

READ MOREINTRODUCTION

APPROACH

READ MORE

YOUR INFORMATIONCOMMUNITIESOur FY20 commitment, a two-year grant to
update the Surf Smart global curriculum,
used data from a previous evaluation to
make enhancements and improvements. The
new curriculum and facilitator’s guide, which
includes a focus on cyberbullying and more
knowledge about WhatsApp and Facebook,will be available online for multiple platforms(desktops, laptops, smart phones, etc.) inlate 2020.

ENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

14

spotlight

Taking a stand against
domestic violenceby Darren Shou, Chief Technology Officer,
NortonLifeLock

NortonLifeLock Labs leads the company’s
future technology and helps guide theglobal consumer cybersecurity industry.
The Labs team, including leading threat andsecurity researchers in the U.S., Ireland, UK,
France, Norway, Germany, Greece, and India,
continually improves our industry-leading
protection and detection capabilities, while
delivering innovative prototypes with testfriendly features.
This team focuses its powers for social good.
With lockdowns globally in place due to the
COVID-19 pandemic, domestic violence
incidents are increasing. Technology canbe used to stalk, harass, and harm people’s
partners, acquaintances, and even strangers.
NortonLifeLock believes that stalkerware
presents a major–and often ignored–threat toconsumers. Over the years, NortonLifeLockresearchers have examined this technology
threat to take it out of the hands of abusers

INTRODUCTION

APPROACH

and give victims and potential victims tools
to help protect themselves and be free ofharassment, violence, and attacks.
This year, NortonLifeLock researchers
published papers on the prevalence ofstalkerware apps on popular app stores–
driving Google to remove over 800 apps
from the Android Play Store–and developed
a proprietary algorithm in partnership with
Cornell Tech and New York University thatranks the probability that any given app is usedas creepware/stalkerware. This “CreepRank”
algorithm has since been incorporated into
Norton™ Mobile Security for Android, allowing
the software to automatically detect thesetypes of surveillance apps, stop them frombeing installed on a device, and remove them ifthey’re already installed.
We are issuing roughly 2,000 stalkerware
warnings a month and blocking hundreds

YOUR INFORMATIONCOMMUNITIESof stalkerware perpetrators from further
nefarious actions. Our efforts detected morethan 223,000 installations of such malicious
applications in FY20.
Additionally, NortonLifeLock is a founding
member of the Coalition Against Stalkerware,pooling its demonstrated expertise instalkerware with domestic violence
organizations and other cybersecurity
companies to protect people from thisinvasive, dangerous technology. Since its
inception, NortonLifeLock and its Coalition
partners created a standard definition anddetection criteria for stalkerware, which
did not previously exist. In addition, theCoalition produced helpful online resources
for stalkerware victims that have been madeavailable in six different languages. With theseresources, users can find information about
what stalkerware is, what it can do, how to
detect it, and how to protect themselves.

ENVIRONMENTOUR PEOPLE

NortonLifeLock products have tremendous
social purpose. Yes, our products help
keep peoples’ productivity tools–theirlaptops, phones, devices–and identities
safe. Our parental controls help parents
monitor their kids’ online safety, our Dark
Web Monitoring and Privacy Monitor
Assistant help people understand andtake control of their digital lives, and weare working to make our products moreaccessible to everyone that needs them.
But our impact goes much further thanthat. Data is the new currency–it’s what
nation-state actors set out to destroy,
what digital gangs steal, and whatcybercriminals trade illegally. These are
incredibly serious issues and our products
have the capability to truly protect people
from harm.”

PERFORMANCE DATA TABLE– Gagan Singh, Chief Product Officer,
NortonLifeLock

GRI AND SASB INDEX

15

Volunteering and philanthropy
Our community programs are most successfulwhen our team members share their expertiseand knowledge. To encourage employees
to support the causes they care about, ourbenefit program includes paid volunteer timeoff, Dollars for Doers grants, and corporate
matching.
In FY20, we combined the caps for Dollars
for Doers grants and corporate matching into
one to increase the flexibility of this benefit.
NortonLifeLock continues to match up to$2,000 per employee per year, and employees
can now choose to support their communities
by volunteering their time or giving financially.

grants to the Australian Red Cross, Sydney
Metropolitan Wildlife Services, and World
Wildlife Fund through a special 2:1 matching
campaign to help those affected by theAustralian wildfires.
COVID-19 relief efforts: This spring, we
donated $100,000 to the UN Foundation’s
COVID-19 Solidarity Response Fund. We
also donated $100,000 through a 2:1
corporate match campaign, where employees
contributed $46,000 for a total of $146,000, to
additional COVID-19 relief efforts.

Our philanthropic giving focuses onorganizations furthering digital safety
education, diversity in technology,
environmental responsibility, and STEM
(science, technology, engineering, andmathematics) education. Our giving strategy isalso designed to allow us to respond in a timely
and effective way to issues that affect ourcommunities. As such, we provide one-time
grants and hold several special 2:1 matching
campaigns to respond to current events.
Examples include:

Racial equity: When protests erupted acrossthe world to put a stop to racial injustice, ourteam donated $100,000 to the National Urban
League. The League, which works to help
African Americans and other underserved
urban residents secure economic self-reliance,
parity, power, and civil rights, has also helped
to inform our diversity strategy. So far, ourCorporate Responsibility team has attended
a National Urban League diversity seminarand participated in an online advocacy day.
We also set up another 2:1 match campaign
and to date have sent an additional $44,500 toorganizations fighting for racial justice.

Australian wildfires: In January 2020,
we donated $25,000 to the American Red
Cross, and an additional $17,000 in matching

Donations alone will not address the systemic
racial inequality impacting people of color. It
is clear that companies need to be part of the

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIES

collective action to find a better way forward.
Fostering diversity and inclusion, both in ourcompany and in our communities, is a priority
at NortonLifeLock and an important focus of
the programs we run through our People andCulture and Corporate Responsibility teams.

Read more about our commitment
to building a diverse and inclusive
workforce in Our People.
We were not able to plan a global week of
employee volunteer service in FY20 due
to the company’s transition as well as the
pandemic. In August of 2020, we re-launched
our Employee Volunteer Program. Volunteer
Leaders at each large site partner with our
Corporate Responsibility team and are
currently engaging employees through virtual
volunteer opportunities to connect with eachother and their communities in a new way.
Read about three of our Volunteer Leaders,
Trisha Hailston, Kelly Ryan, and Amanda Davis,
and the work they can safely do in their own
communities, as well as the virtual events
they’ve organized for their offices, on our
Corporate Responsibility Blog.

ENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

16

Commitment tohuman rights

Public policy and advocacy

NortonLifeLock protects human rights in our own
operations and throughout our supply chain.
Our Human Rights Policy statement builds on
our commitment to uphold the ten principlesof the United Nations Global Compact, which
we recommitted to in FY20, and is aligned with
the Universal Declaration of Human Rights. This
commitment is also enshrined in both our Codeof Conduct and Global Supplier Code of Conduct.
Five suppliers manufacture and distribute our
products and we regularly engage with themto share best practices. In FY20, our two main
suppliers who manufacture and distribute over
95% of our physical products globally wereconsidered “low risk” for human trafficking by
the Dun and Bradstreet Human Trafficking Risk
Index. Moving forward, our aim is to assess theother Tier 1 suppliers who supply the remaining
percentage of our physical products.
We expect all directors, officers, employees,
interns, and contractors of NortonLifeLock,as well as third parties acting on behalf of thecompany, to be well aware of the implications ofviolating any aspect of our Codes.

Visit our website for a full list of our
Corporate Responsibility Policies
and Statements.

INTRODUCTION

APPROACH

NortonLifeLock’s Government Affairs teammanages the company’s participation in public
policies that affect our consumers and business.
Data protection, online privacy, and identity theft
are critical issues to our consumers, and we
advocate for legislation that protects consumers
and curbs cybercrime. The Government Affairs
team prioritized transparency and began shifting
our public policy work to meet the needs of our
new consumer facing company in FY20.

Policy engagement and awareness
The Government Affairs team raises awarenessand provides key data and insight to elected
officials at all levels of government, their staff,
media, and through industry coalitions. As
an example, California enacted one of thestrongest privacy-protection laws in the nation,
the California Consumer Protection Act (CCPA),
which went into effect on January 1, 2020. Under
the CCPA, consumers are afforded new privacy
rights regarding their personal information thatcompanies and websites collect–such as theright to opt-out.
While our product teams worked on the releaseof Norton™ Privacy Builder–a new browser
extension that makes it easy for consumers totell websites not to sell their information–ourGovernment Affairs team was busy organizing
two privacy conferences. We hosted PrivacyConin both Washington, DC, and Sacramento, CA,
where we discussed the CCPA with federal

YOUR INFORMATIONCOMMUNITIESand state legislators, privacy advocates, state
attorney generals, and concerned consumers.

Policy partnerships
In FY20, we continued our involvement in
the Better Identity Coalition, which works
alongside policymakers to improve digital
security, privacy, and identity protection
through education and collaboration. As afounding member, we helped the coalition
publish Better Identity in America: A Blueprintfor Policymakers, and we are currently drafting
best practices on the next generation ofidentity theft protection.
We recently became a member of the National
Institute of Standards and Technology’s (NIST)
National Cybersecurity Center of Excellence, acollaborative hub where industry organizations,
government agencies, and academic
institutions work together to address the U.S.’smost pressing cybersecurity issues.

Policy in the time of COVID-19
This year was also complicated by the
COVID-19 pandemic. We’ve seen COVID-19
relief scams, healthcare fraud, an increasein identity theft as people spend moretime online, and, at the time of publication,
Maryland officials were investigating a massive
coronavirus unemployment insurance fraud
scheme totaling over $500 million that usedstolen identity data to submit false claims.

ENVIRONMENTOUR PEOPLE

States in the U.S. are acting quickly to enact
legal protections for consumers in the face of
the increasing COVID-19 scams. At the federal
level, the Improving Digital Identity Act of 2020,
which was championed by the Better Identity
Coalition, was introduced into the U.S. Congressin September 2020. As we look to FY21, ourGovernment Affairs team will continue to workwith legislators to raise awareness of how they
can best protect consumers against identity
theft, fraud, credit scams, and cyberthreats.

Political disclosure and accountability
Since 2001, NortonLifeLock has maintained our
Global Political Contributions Policy, a formal
policy regarding political activities, political
disclosure, and accountability. The Board’s
Nominating and Governance Committeemonitors compliance with this policy. We do not
maintain a political action committee (PAC) andin 2020, did not make any corporate politicalcontributions. All past political contributions
and our Global Policy are available on Investor.
NortonLifeLock.com.

Visit our website for more
information on Transparency on
Political Engagement.

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

17

Environmental
stewardship#NortonLifeLockCares
about the environment
From fires in Australia and California totyphoons across Asia to flooding anddroughts across Europe, it is clear that
protecting our environment is key to ensuringa safe and sustainable future. While legal
compliance has always been our starting
point, a sharp focus on environmental
performance that goes beyond this ispart of our culture of responsibility. It also
contributes to the urgent action needed toaddress global climate change and otherenvironmental challenges.
While we spent the majority of FY20transitioning to a smaller, consumerfocused company, environmental
sustainability remained a priority focus
area. NortonLifeLock’s Environmental
Management Policy is publicly available
and details our approach to managing
environmental impacts across our production
operations, business facilities, and supply
chain, as well impacts associated with
our products and services. Our two main
suppliers, who manufacture and distributeover 95% of physical product globally,
maintain environmental management
systems that are ISO14001 certified.

INTRODUCTION

APPROACH

As we firm up our environmental strategy
in FY21, we have engaged internal andexternal experts to help us develop programs
and policies that reduce greenhouse gas
emissions, make our product packaging moresustainable, and engage our employees inprotecting the environment.

Reducing greenhouse gas emissions3
We work to mitigate Scope 1 (directemissions), Scope 2 (indirect emissions,
including purchased electricity), and Scope 3(all other indirect emissions, including businesstravel and procurement) greenhouse gas (GHG)
emissions. As a new consumer company
offering mostly digital products, we haveidentified GHG reductions from data centerand office energy use (Scope 2 emissions) andemployee travel (Scope 3 emissions), to be
our most immediate priorities. Looking ahead,
we will investigate opportunities to reduce
emissions in the supply chain of the goods andservices we purchase and which we recognize
as a significant driver of our Scope 3 footprint.

YOUR INFORMATIONCOMMUNITIESIn this report’s performance tables, we
include an estimate of our FY20 Scope 1 and2 emissions for the sites that have currently
been confirmed as part of the NortonLifeLock
portfolio.4 During FY20, we experienced a 45%
increase in Scope 1 emissions due to two
refrigerant recharges needed in our Culver City,
CA office. Large refrigerant recharges are not acommon occurrence (typically every 15 years
or more), but the global warming potential ofcertain types of refrigerants is significant.
We used 116,821 gigajoules of electricity in
FY20, 24% of which was renewable energy
included in the electricity delivered to our sites
by our utility suppliers.

A refreshed strategy
In FY20, we completed a GHG inventory
to guide our development of a refreshedclimate strategy and goals. As we consider
our future strategy, it will look different fromthe past. With our physical offices largely
closed and employee travel on hold due to
COVID-19, as well as our smaller company

ENVIRONMENTOUR PEOPLE

size, we anticipate lower Scope 1 and 2
emissions across the company in FY21. We
will also consider opportunities to limit ourenvironmental impacts as we anticipate andplan for a post COVID-19 world.
In FY20, we signed on to the Business in
the Community Ireland (BITC)’s Low Carbon
Pledge, demonstrating our commitment
to reduce our GHG emissions and thereby
contribute to limiting global temperaturerises. Through the Low Carbon Pledge, wehave committed to reducing Scope 1 and 2
greenhouse gas emissions intensity of our
Irish operations by 50% by 2030. We have also
engaged renewable energy experts to help us
find opportunities to increase our use of clean
energy in FY21.
3

Data during a transitional year: As a newly developed
company, and one that is undergoing a broad restructuring
effort that includes the sale of several commercial
buildings (still to be completed), it is difficult at this time toaccurately collect and report on FY20 environmental data.
In this report, we disclose available data. Next year (FY21),
we will resume our full environmental reporting with FY21
as our first full baseline year.

4

Moving forward many of our offices will transition from
owned to leased properties.

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

18

Product packaging

Supply chain sustainability

At present, approximately 90% of
NortonLifeLock’s products are delivered
digitally. The majority of our software products
come pre-installed on hardware devices orare downloaded electronically by customers,
requiring no physical product or packaging
materials. Even though only 10% of our
products are material goods, in FY20 weshipped nearly eight million physical units,
making packaging sustainability an importantarea of focus for our company.

NortonLifeLock promotes high ethicalstandards for human rights, environmental
protections, and responsible businesspractices in our own operations andthroughout our supply chain. We focus ontransparency and continuous engagementwith stakeholders to share and refine
our approach, policies, and supply chain
management practices. While our supply
chain size and risk are smaller as a result of
our corporate transition, our commitment
to the highest ethical standards remains
the same.

Over the past decade, we have evolved our
product packaging multiple times, greatly
reducing the amount of waste associatedwith our products and the cost of shipping.
Today, several of our products are deliveredon cards smaller than the size of a credit
card. Additionally, 32% of all NortonLifeLockproducts are currently made with andpackaged in Forest Stewardship Council (FSC)
certified paper. FSC certification ensures that
products come from responsibly managed
forests that provide environmental, social, andeconomic benefits to their communities.

Read more about our commitment
to human rights in The World and in
our Global Reporting Initiative index.

INTRODUCTION

APPROACH

For example, in FY20 100% of our Tier 1
physical product suppliers agreed to our
corporate responsibility requirements.
Additionally, our two main suppliers, whomanufacture and distribute over 95%
of physical product globally, completed
the Responsible Business Alliance SelfAssessment Questionnaire and shared theirresults, completed forced labor training,
and are considered “low risk” on the Dun
and Bradstreet Human Trafficking Index.
Moving forward, our aim is to assess ourTier 1 suppliers who supply the remaining
percentage of our physical products.

Employee involvement
We believe every individual can make a difference
and that together our actions can have a big
impact. Through NortonLifeLock’s site-level
volunteer committees, employees encourage
each other to take part in our environmental
sustainability efforts. In FY20, we continued
Choosing Green in 2019, an employee campaign
focused on environmental awareness, education,
challenges, and ideas for individual action.
Choosing Green impacts included:• Introducing Less Meat Mondays in some of
our largest cafes. Consuming less meat is a
simple way to make an impact as industrial
scale beef production requires 20 times moreland and emits 20 times more greenhouse gas
emissions than common plant-based protein.
• Creating an “ask a sustainability question”
button online for employees to submit
environmental questions.
• Turning our lights off on March 30 in support ofEarth Hour.
• Hosting the 10th annual Green Fair at our
Mountain View, CA office and building a water
tower for students in Urse, India to support
Earth Day and World Water Day.
• Planting over 3,200 trees with One Tree Planted
to support reforestation projects.

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLE

The Global Supply
Chain team constantly
strives to implement
sustainable processes.
Our objectives are tominimize negativeenvironmental impacts, conserve energy,
and protect natural resources with ourglobal partners. We partner with our
product teams to design products that meet
our customers’ expectations and that are
better for society and the environment.”– Joe Goode, Director Supply Chain,
NortonLifeLock

Our employees were
excited to learn little
ways they could “gogreen” in their everyday
lives. From using
reusable water bottles
to riding a bicycle to work, the Choosing
Green campaign showed us that every
individual can make a difference, and thattogether we can make a significant andlasting impact.”– Amanda Davis, Senior Corporate
Responsibility and Environmental Manager,
NortonLifeLock

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

19

Our People#NortonLifeLockCares about
our team
NortonLifeLock is committed to building astrong, diverse, and passionate team—a teamthat stands together to protect our customers
like no one else can. FY20 was a year ofsignificant transformation and transition due tothe asset sale and integration of our Enterprisebusiness to Broadcom. Our People and Culture
team played a key role throughout, supporting
the successful transfer of thousands ofenterprise employees to Broadcom while
also standing up NortonLifeLock as aconsumer company. In the latter part of
FY20, we also executed a separate divestitureof our ID Analytics business to LexisNexis,
while managing a significant population of
employees providing transition services.
A key objective of People and Culture in FY20
was to establish the NortonLifeLock Executive
Leadership Team, which is now 30% female.
We assembled and promoted several existing
leaders while attracting and onboarding new
consumer-oriented leaders. While much of ourtalent development and management work
this fiscal year focused on our new company
organizational design, the creation of new

INTRODUCTION

APPROACH

teams and roles, and building our new leadershipteam, we continued to invest in our talent andprovide access to various career development
resources and trainings. These employee
offerings included Leadership Success training
modules including, but not limited to, Leader
as Coach, Diversity and Inclusive Leadership,
Building Great Teams, Making Great Decisionsand Hiring for Results. We also continued toencourage employees to attend conferences andtechnical trainings, both online and via our tuition
reimbursement initiative.
Our Board of Directors has long recognized that
our employees are one of our most important
assets and is engaged with management toensure that we are an employer of choice for themost talented employees in our industry. While
the full Board and leadership discuss humancapital management with regards to its role inour overall long-term strategy, our Compensation
Committee has responsibility for overseeing
human capital management at NortonLifeLock.

For more details on the Board’s
oversight of human capitalmanagement, visit our 2020 Annual
Report.

YOUR INFORMATIONCOMMUNITIESCompany values
As we transitioned to a standalone company,
we moved quickly to define a set of values
that underscore our commitment to ourcustomers and to each other. Our People andCulture team worked with our employees todevelop a new set of company values that
represent the culture of our NortonLifeLockteam. In addition to a company-wide
survey, employees joined focus groups
in unprecedented numbers to drive theconversation around behaviors, attitudes, andcommon goals for the company.

FY20 was a year of bothincredible transition
and incredible growthfor our team. We
worked through asignificant asset sale, became a pureplay consumer Cyber Safety company,
established a new leadership team, andthen went right to work to define the new
mission-driven NortonLifeLock. Our values
are the foundation for everything we do,
and we engaged our employees in every
step of our new values process. I lookforward to championing these values and tocontinuing to create the NortonLifeLock we
all know we can be.”We are proud to highlight our new
NortonLifeLock Values:• Advocate: Think Consumer First• Be Empowered: Own It• Communicate: Be Open and Authentic• Execute: Smart and Scrappy• Win Together: Innovate and Grow
Our mission and values come together in the
NortonLifeLock Code, a commitment we all
make as members of NortonLifeLock and astrusted partners to consumers.

ENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE– Kara Jordan, Chief People and Culture
Officer, NortonLifeLock

For more details on the varietyof employee benefits we offer,including a flexible workplace,health insurance, paid time-off,well-being incentives, disability
and life insurance, retirement
programs, equity grants, employee
stock purchase (ESPP), competitivecompensation, and recognitionchoose your country from ourglobal website and then click
About / Careers.

GRI AND SASB INDEX

20

Diversity, equity, and inclusion
NortonLifeLock is committed to building an
inclusive, diverse workforce. We celebrate
diversity as a driver of innovation and knowthat diverse points of view help us makeproducts and services that meet the needsof the broad spectrum of people we serve.
We invest in diversity not just because it’s theright thing to do, but because it translates toa higher performing industry, company, andbottom line.
This starts with ensuring a culture where
people of every race, ethnicity, age, sexual
orientation, disability, background, andexperience are respected and encouraged to
thrive. We believe that a work environment
where people can be their authentic selves canhelp amazing things come to life.
We care about transparency and share our
performance (see Performance Tables),challenges, and action plans for continual
improvement with our employees andstakeholders. As Symantec, in FY20, theglobal organization included 25% womenand in the U.S. 10% of employees identified
as underrepresented minorities. As
NortonLifeLock in FY20, global representation
increased to 31% female, and in the U.S.
underrepresented minorities represented
10.8% of our workforce. As a standalone

INTRODUCTION

APPROACH

consumer business, we are in the process ofestablishing our baseline representation andlook forward to sharing our first full year ofdiversity, equity, and inclusion data in our FY21
report.
We are committed to equal pay for equal work.
We completed our annual pay equity review
in FY20 and are proud to report that our pay
ratios (average female salary / average malesalary) are equitable across all three levels:
executives (1.12), management (1.12), andnon-management (1.12). We are preparing for
our FY21 pay equity review and are adopting a
different approach that will enable us to bringthis process in-house with an independent firm
partner to verify our process and findings. This
will allow us to continually monitor pay equity
as part of our ongoing diversity and inclusion
efforts.
We also see supporting anti-discrimination
efforts as key to being a responsible citizen.
As an example, we are proud to be part of
The Business Coalition for the Equality Act, agroup of leading U.S. employers that support
the Equality Act, which would guarantee
explicit, permanent protections for lesbian, gay,bisexual, and transgender people under our
existing civil rights laws.

YOUR INFORMATIONCOMMUNITIESOur diversity, equity, and inclusion
strategy
We are currently finalizing a five-year strategy
for NortonLifeLock to attract, retain, anddevelop the best diverse cybersecurity talent
in the world. This strategy will be supported
by focused long-term goals and shorter-term
objectives and is structured across four key
pillars: measurement and accountability,
fostering an inclusive environment, diversifying
our workforce, and employee development andretention.
For example, we offered diversity and inclusion
training to employees in Tempe, AZ, Dublin,
Ireland, and Chennai, India, as well as a remotetraining for our Consumer Services and Inside
Sales team in FY20. Increasing diversity
awareness and removing unconscious bias
is a key part of our fostering an inclusive
environment pillar and we will review
workplace diversity training programs in FY21
and FY22. We will be rolling out our Diversity,
Equity, and Inclusion Dashboards. These
dashboards, distributed quarterly to seniorleaders, will include team representation dataand goals to support focused efforts that growour representation of underrepresented talent.

ENVIRONMENTOUR PEOPLE

Our diversity, equity, andinclusion mission:
To proactively grow ourrepresentation of underrepresented
groups at all levels (diversity), where
everyone has an opportunity fordevelopment and advancement(equity), and to belong to an inclusive
culture where they feel valued andare able to bring their whole selves towork every day (inclusion).

Our diversity, equity, andinclusion vision:
We believe in and embrace an
inclusive culture where all identities
are celebrated and encouraged to
thrive. To us, diversity is more thanjust race, gender, and ethnicity. It
is also about diversity of thought,
experiences, identities, andbackgrounds.

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

21

Driving diversity
In FY20, women made up 31% of our global
team and 27% of our leadership. We arefocused on increasing gender diversity at
NortonLifeLock and work to diversify ourapplicant pool through partnerships we havein place, those we will continue to establish
moving forward, and through investments in
our internship program.
Diversifying our workforce is a pillar of
our FY21 strategy and we have increased
our focus on driving diversity in FY21.
We are approved as a Work180 partnercompany, the women-focused recruitmentsite that only lists career opportunities from
employers that support diversity, inclusion,and flexibility.
We are now posting all job descriptions on
diverse recruiting sites, including the National
Society of Black Engineers and Women Who
Code. Our People and Culture team is also
partnering with our Corporate Responsibility
team to hire diverse talent from the nonprofit
cyber training programs NortonLifeLockhelps fund.
We are participating in McKinsey &Company’s new Black Leadership Academy
for the first time in November 2020.
The Academy is designed to accelerate
the progression of Black leaders in theirorganizations. A cohort of NortonLifeLock

employees will attend either a three-monthBlack Executive Leadership Program, designed
for senior leaders looking to further develop
their leadership capabilities and improve criticalskills to grow personally and professionally, or a
six-month Management Accelerator, designed
to support ongoing career progression for highperforming early to mid career managers. At
the end of the program, all participants will
have direct engagement with the Executive
Leadership Team to discuss their experienceand provide feedback.

These groups play a vital role in helping create
an inclusive work culture where everyone feels
seen, heard, respected, and valued.

Driving inclusion

The meeting left an incredible mark on
our team after team members fromunderrepresented groups spoke candidly
about their experiences. Each week, weshare information that highlights importantmoments or people in the diversity andinclusion conversation. The goal is to broaden
our perspectives and better understand theexperiences of others. A recent example ofa Learning Journey came from one of our
Community Champions and helped highlightthe importance of National Hispanic Heritage
month, which recognized the histories,
cultures, achievements, and contributions of
the Hispanic American community.

Increasing our representation and diversity is
one half of the equation. Establishing a cultureof inclusion is the other half. This year, in FY21,
we relaunched seven employee resourcegroups, called Communities, as a platform
for communities of employees to cometogether as allies, to learn, support, mentor, andcelebrate with one another.
These Communities include N-ABLED(NortonLifeLock Disability Allyship), WONDER(Women Outreach and Development
Resources), N-PRIDE (NortonLifeLock’s
LGBTQIA+ and Allies Alliance), NOBLE(NortonLifeLock’s Black Life Empowerment),
SNAP (Supporting New and Aspiring
Professionals), CARES (Caregiver’s Alliance for
Resources, Education and Support), and HOLA
(Hispanic/Latino Outreach Leadership andAdvancement).

We also launched a weekly series called
NortonLifeLock Learning Journeys on our
employee intranet NSight. Our Learning
Journey initiative came out of an inspiring
conversation during a company-wide monthly
meeting wherein we spoke about our desire
to be a company of action when it comes toinclusion and diversity.

Read more about our partnerships
with NPower, Year Up, Reboot
Representation and AAUW toincrease diversity in tech in The
World.

Supporting foster youth
NortonLifeLock partnered with Pivotal, anonprofit that works to help young people
in foster care, from FY15 through FY20. We
supported Pivotal’s STEM training program for
foster youth and have hosted several Pivotal
interns during our partnership. Most recently, in
2020, we recruited Diana Pham for an intern role.
A confident and strong candidate, Diana was well
prepared, her communication skills were strong,she was passionate about learning new things,
and open to exploring various opportunities
within our organization. Diana supported bothour Diversity, Equity, and Inclusion and TalentAcquisition teams and within three months ofcompleting her internship, we offered Diana afull-time role.

As a foster child and firstgeneration college graduate,
the opportunity to be partof NortonLifeLock is lifechanging. This would nothave been possible without
Pivotal, who supported my education anddeveloped me as an independent woman. As
I continue to walk confidently into the future, I
can pave the way to success for generations tocome and be an example of how our system canlift youths from underprivileged to contributing
members of society.”– Diana Pham, NortonLifeLock employee

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

22

Hear from our Community Champions
I am elated to be a part of the HOLA Community as a Champion. What a

The technology industry is notorious for its lack of diversity. I know NortonLifeLock

wonderful way to connect with, support, and celebrate all the wonderfulis a company that goes beyond acknowledging its diversity and inclusion

Hispanic/Latino folks in our NortonLifeLock family. Plus, I get thechallenges, and actually focuses on solutions. I am excited to see the future positive

opportunity to learn more about my heritage! ”

impact of NOBLE and the other Communities on the company’s culture, talentpipeline, products, and ultimately our business.”– Marie Miller Rodriguez, HOLA Champion– Spring A. Harris, NOBLE Champion

I’m filled with happiness and pride (you see what I did there!) to have been given

I would love to create a culture at NortonLifeLock that encourages

the opportunity to champion N-PRIDE. Every individual, no matter their race,

our global people to break their own barriers, to be confident, and togender identity, sexual orientation, etc., must be respected, loved, appreciated, andchallenge themselves to set goals and find new opportunities.”

presented with equal opportunities. And remember, you don’t have to be LGBTQ to– Yoshiko Blake, WONDER Co-Champion

fight for LGBTQ+ rights!”

N-ABLED works to advise, educate, outreach to, and assist business and– Gayathri Rajendiran, N-PRIDE Co-Champion

With 19 years of experience with IT services, I believe in continuous learning andindividuals on how to be equitable and inclusive to those with a disability.

development. I’m thrilled to co-lead SNAP as our community provides all NLOKers

Our group is excited to help make NortonLifeLock a place where all of ourwith an opportunity for mutual growth. Through SNAP we’ll focus on networking,team members feel included.”enhancing creativity, and providing mentorship opportunities.”– Sandeep Kanabar, N-ABLED Champion– Rinkesh Jindal, SNAP Co-Champion

I am very excited to be a one of the co-champions of the global Wonder

CARES was created out of my personal experience with becoming my mother’s legal

team. The success of each woman should be an inspiration to another. I

guardian due to Alzheimer’s. I was now juggling not only a full-time job, being a motherlook forward to this group raising each other up and having each other’s

and wife, but also this extremely time-consuming legal and caretaking effort. My hopebacks.”

is that people in CARES can rely on each other for support and guidance during the– Amrin Fathima, WONDER Co-Champion

caring for an aging loved-one.”“I am proud to represent the LGBTQIA+ community as an N-PRIDE– Lora Bolick, CARES Champion–

I grew up in a smaller town in Slovakia where everyone knew each other. From my own

champion.”experience, starting a career can be overwhelming: everything seems so new andunknown. SNAP plans to support our members in their sense of belonging, to create and– Michael Obert, N-PRIDE Co-Champion

maintain connections! Their individual success is, after all, our collective success at
NortonLifeLock.”

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLE– Martina Hranova, SNAP Co-Champion

PERFORMANCE DATA TABLE

GRI AND SASB INDEX

23

About this report
In November 2019, Symantec Corporation andits related Consumer Division transitioned to
NortonLifeLock Inc.–a standalone company
dedicated to consumer Cyber Safety. The
Symantec Enterprise Security Products
became a division of Broadcom. For more
information on this transition please visit
our website.
NortonLifeLock is committed to conducting
our business with attention to, and respect
for, ethical operation, a diverse and inclusive
workforce, the environment, and positive
societal impact. We share our progress indelivering on this commitment in our corporate
responsibility report.

The report covers the company’s activities
between April 1, 2019 and April 3, 2020. We
have also included relevant examples ofimpact that occurred in calendar year 2020.
The activities, performance, and data detailed
in the report relate to NortonLifeLock Inc.’sworldwide operations unless otherwise stated.
Please see our data summary and content
index at the conclusion of the report for any
exceptions to this.
We welcome your questions about thisreport and about NortonLifeLock’s corporate
responsibility efforts via
CR@nortonlifelock.com.

We have developed this report using the
Global Reporting Initiative (GRI) Sustainability
Reporting Standards at the “Core in
Accordance” level as well as the Sustainability
Accounting Standards Board (SASB)
Standards, a set of 77 standards focused onconnecting business and investors on thefinancial impacts of sustainability.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

24

UN Sustainable Development Goals highlights
Ensure inclusive and equitable
quality education and promote
lifelong learning opportunities
for all.

• Two-year grant to update the WAGGGS Surf Smart global curriculum, delivered to more than 300,000 children since 2012

Achieve gender equality andempower all women andgirls.

• Developing five-year Inclusion and Diversity strategy; In FY20, women made up 31% of our global team and 27% of our leadership• Partnership with National PTA to create The Smart Talk, an interactive resource bringing caregivers and kids together to create tech ground rules• 160 PTAs across the U.S. held a Safer Internet Day event centered around The Smart Talk, reaching 6,600 people• COVID-19 relief aid provided to all Arizona PTAs that applied• Approved as a Work180 partner company, a women-focused recruitment site
• With Nasscom Foundation, launched the Cyber Security Skills Development Initiative for Women, which trained 121 women in 2020
• Completed annual pay equity review in FY20 and are proud to report that our pay ratios are equitable across all workforce levels

Promote sustained,
inclusive and sustainableeconomic growth, full andproductive employment anddecent work for all.

• A cohort of NortonLifeLock employees will participate in McKinsey & Company’s new Black Leadership Academy, designed to accelerate the progression of Black leaders

Reduce inequality
within and among
countries.

• Three-year commitment to Reboot Representation, committed to doubling the number of Black, Latinx, and Native American women graduating with computing degrees by 2025

• In FY20, none of our Tier 1 physical product suppliers were considered high risk for human trafficking by the Dun and Bradstreet Human Risk Index• Our Human Rights Policy statement is aligned with the Universal Declaration of Human Rights• Since Symantec began the cyber career training program in 2014, 981 students have graduated through all of our nonprofit partner training programs. Of these, 71% were hired by a company
or choose to pursue additional education within six months of graduating• Continued partnership with the AAUW (American Association of University Women) granting a total of $60,000 to 12 camps offering cybersecurity curriculum• $100,000 grant to the National Urban League, which helps African Americans and other urban residents secure economic self-reliance, parity, power, and civil rights• Relaunched seven employee resource groups, called Communities, as a platform for communities of employees to come together as allies

Ensure sustainableconsumption and production
patterns.

• Evolved product packaging so that 90% is currently delivered on a card the size of a credit card, with minimal packaging

Take urgent action tocombat climate change andits impacts.

• Completed a GHG inventory to guide our development of a refreshed climate strategy and goals

INTRODUCTION

APPROACH• 32% of packaging made with Forest Stewardship Council Certified (FSC) board• Corporate Responsibility site committees include environmental leaders who lead employee campaigns focused on environmental awareness, education, challenges, and ideas for individual
action• Used 24% renewable energy in our primary data center• Signed on to the Business in the Community Ireland (BITC)’s Low Carbon Pledge

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

25

2020 Performance Tables
Financial Performance

FY20 Gender Diversity
FY20

Revenue (in millions of $)Total revenue

2,490

Revenue by region
Americas74%

Europe, Middle East, and Africa (EMEA)

15%

Asia Pacific and Japan (APJ)

11%

FemaleMale

Global gender diversity

31%

69%

Leadership

27%

73%

Technical

19%

81%

Non-technical

37%

63%

Cost of revenue (in millions of $)Total cost of revenue

393

Operating expense (in millions of $)Total operating expense

1,742

Income tax
Income tax benefit expense (in millions of $)241

Effective income tax rate29%

Net income (loss)

3,887

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

26

2020 Performance Tables
FY20 Workforce Breakdown by Gender
Total

FemaleMale

Not Declared

Permanent (employees)

3655

1149

2500

6

Temporary (contingent workers)

52

4

1

47

Interns

6

2

4

0

Full-Time

3644

1139

2499

6

Part-Time

11

10

1

0

Americas

1818

660

1157

1

Asia Pacific, Japan (APJ)

292

85

203

4

Europe, Middle East, and Africa (EMEA)

324

143

180

1

India

1221

261

960

0

Executive (VP or above)

55

8

47

0

Manager (non-executive without direct reports)

1380

365

1012

3

Individual contributor (non-executive without direct reports)

2220

776

1441

3

7

2

5

0

Employment contract

Employment type

Workforce by region

Employee category

Board of Directors
Board of Directors

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

27

2020 Performance Tables
FY20 U.S. Ethnic Diversity

FY20 U.S. Ethnic Diversity

U.S. race / ethnicity total (%)

Leadership (%)

White

48%

White

58%

Asian

39%

Asian

31%

Hispanic

4%

Hispanic

4%

Black

3%

Black

2%

Two or more3%

Two or more

3%

American Indian / Alaska Native

0.4%

American Indian / Alaska Native

0%

Native Hawaiian / Other Pacific Islander

0.4%

Native Hawaiian / Other Pacific Islander

0%

Decline to specify

2%

Decline to specify

2%

Technical (%)

Non-Technical (%)

White

32%

White

56%

Asian

62%

Asian

28%

Hispanic3%

Hispanic

5%

Black

1%

Black

5%

Two or more

1%

Two or more

4%

American Indian / Alaska Native

0%

American Indian / Alaska Native

1%

Native Hawaiian / Other Pacific Islander0%Native Hawaiian / Other Pacific Islander

1%

Decline to specify

1%

Decline to specify

2%

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

28

2020 Performance Tables
The World

Philanthropic Giving
FY20

Greenhouse Gas Emissions5

FY20
Philanthropic Giving ($USD)

Total absolute emissions (thousands of metric tons of CO2e)26

Total giving

13,606,314

Scope 1 (natural gas, diesel, propane, refrigerants, gasoline)

7

NortonLifeLock Foundation

325,000

Scope 2 market-based (purchased electricity and heating)9

Grants and sponsorships

1,511,920

Scope 2 location-based (purchased electricity and heating)

10

Matching gifts, Dollars for Doers

811,962

Scope 3 (air travel)

10

Software donations (retail value of licenses)

10,957,432

Total normalized emissions (metric tons of CO2e
per million dollars of revenue)

10

Licenses donated

243,072

Emission intensity - Scope 1

3

Employee Contributions

Emission intensity - Scope 2 market-based

4

Employee giving ($USD)

582,620

Emission intensity - Scope 3

4

Volunteer hours

18,726

Energy Consumption (gigajoules)
Total energy consumption

286,454

Scope 1 (natural gas, diesel, propane, gasoline, onsite solar)

24,362

Scope 2 (purchased electricity and heating)

116,821

Scope 3 (air travel)

145,271

Energy intensity (all scopes per million dollars of revenue)

115

Total electricity consumption from renewable sources (%)

24%

6

Environmental Fines
Number of environmental fines

0

Grants by Focus Area
FY20
Diversity

14%

Education

37%

Environment

9%

Online safety

32%

Miscellaneous (health, disaster response, India-based, etc.)

8%5For many years in the past, Symantec achieved external assurance of its greenhouse gas (GHG) scope 1, 2, and 3 emissions, and water withdrawal data. While we were unable to complete a full inventory and external assurance this year, we plan to seek external verification again
next year when we are more established and have our first full year of baseline data for FY21.
6

Includes renewable energy included in the power mix delivered by our utility suppliers where information is available. Excludes renewables in the average/regional grid electricity.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

29

2020 Content Index
NortonLifeLock’s FY20 Corporate Responsibility Report applies the 2016 version of the Global Reporting Initiative (GRI) Standards; “2016” refers to the Standards issue date, not the date of information presented inthis report. We also provide a cross reference to the United Nations Global Compact (UNGC) and Sustainability Accounting Standards Board (SASB) reporting standards in the below index.

GRI 102: General Disclosures 2016
Disclosure

GRI Description

GRI Cross-reference or Answer

UNGC Cross-reference

SASB Cross-reference

Organizational Profile
102-1

Name of the organization

NortonLifeLock Inc.

102-2

Activities, brands, products,
and services

Company profile
2020 10-K, p. 4-8

102-3

Location of headquarters

Tempe, Arizona

102-4

Location of operations

Global

102-5

Ownership and legal form

2020 10-K, p. 4

102-6

Markets served

2020 10-K, p. 4

102-7

Scale of the organization

2020 10-K, p. 5-9

102-8

Information on employees
and other workers

2020 10-K, p. 10
Performance Tables, p. 27-29
Our People: p. 21

102-9

Supply chain

The World: p. 18, 20
Global Procurement Code of Conduct
Corporate Responsibility Policies

102-10Significant changes to theorganization and its supply chain

About this report, p. 25
2019 10-K, p. 4

102-11

Precautionary Principle
or approach

The Precautionary Principle is not applied specifically across the organization, nor in the development and introductionof new products. NortonLifeLock uses a model similar to the Precautionary Principle for risk management with regard tobusiness continuity. Our Crisis Management and Continuity Management teams determine the impact likelihood of each threat
occurring and conducts exercises to ensure full understanding of possible impact. This allows us to determine and report any
unacceptable single points of failure. Formula used to determine risk: risk value = threat impact x threat probability.

102-12External initiatives

UN Global Compact participant

Membership of associations• Software Assurance Forum for Excellence in Code (SAFECode)• REBA (Renewable Energy Buyers Alliance One Tree Planted• NIST National Cybersecurity Center of Excellence• Coalition Against Stalkerware• Better Identity Coalition

102-13INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESHuman Rights, Labour,
Environment: Relevant
policies, procedures, activities.

ENVIRONMENT

Human Rights, Labour,
Environment: Relevant
policies, procedures, activities.

OUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

30

2020 Content Index
Disclosure

GRI Description

GRI Cross-reference or Answer

UNGC Cross-reference

SASB Cross-referenceStatement from seniordecision-maker

Messages from the Chief Executive Officer and Board, p. 2, 3

CEO statement including continued support of the United Nations
Global Compact.

Values, principles, standards, andnorms of behavior

Ethics and Integrity, p. 9
Code of Conduct

Human Rights, Labour, Environment, Anti-Corruption: Relevant policies,
procedures,
activities.

Governance structure

Our Approach, p. 92020 Proxy Statement, p. 6-10
Charter of the Nominating and Governance Committee of the Board of Directors
Corporate Governance

Strategy102-14

Ethics & Integrity
102-16

Governance102-18

Stakeholder Engagement102-40

List of stakeholder groups

Stakeholder engagement, p. 10102-41

Collective bargaining
agreements

2020 10-K, p. 9102-42

Identifying and selecting
stakeholders

Stakeholder engagement, p. 10102-43

Approach to stakeholder
engagement

Stakeholder engagement, p. 10102-44

Key topics and concerns raised

Our Approach (Materiality, Stakeholder Engagement), p. 7-10

Labour: Relevant policies, procedures,
activities.
Labour: Measurement of outcomes.

Human Rights, Labour, Environment, Anti-Corruption: Relevant policies,
procedures, activities.

Reporting Practice102-45

Entities included in the
consolidated financial
statements

2020 10-K, p. 64-72

102-46

Defining report content and topic
boundaries

Our Approach, p. 10
About this Report, p. 25
GRI/UN Global Compact Index; Topics and Topic Boundary Table

102-47

List of material topics

Our Approach, p. 10102-48

Restatements of informationNone.

102-49Changes in reporting

About Reporting, p. 25
2020 10-K, p. 39

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

31

2020 Content Index
Disclosure

GRI Description

GRI Cross-reference or Answer

UNGC Cross-reference

SASB Cross-reference

Reporting Practice (continued)
102-50

Reporting period

April 1, 2019 - April 3, 2020

102-51

Date of most recent report

Our last Corporate Responsibility report was published in October 2019.

102-52

Reporting cycle

Annual102-53

Contact point for questions
regarding the report

CR@nortonlifelock.com

102-54Claims of reporting in accordancewith the GRI Standards

About this report, p.25

102-55

GRI content index

GRI Index

102-56External assurance

Performance Table, p. 30

Time period covered by Communication on
Progress (CoP).

Environment: Measurement of outcomes.

GRI 103: Topics and Topic Boundaries 2016
GRI Management Approach Crossreference7

GRI Material Topic

Relevant External Entities

UNGC Cross-reference

SASB Cross-reference

Economic
GRI 201: Economic Performance2020 10-K p. 6-29

GRI 205: Anti-corruption

Ethics and Integrity, p.9
Code of Conduct
Conflict Minerals Policy

Communities; Customers; Governments andregulators; Investors; Suppliers
Anti-corruption: Relevant policies, procedures,
activities.

Environmental
GRI 302: Energy

The World, p. 19
Environmental Policy Statement

Communities; Customers; Governments andregulators; Investors; Suppliers

Environment: Relevant policies, procedures,
activities.

GRI 305: Emissions

The World, p. 19
Environmental Policy Statement

Communities; Customers; Governments andregulators; Investors; Suppliers

Environment: Relevant policies, procedures,
activities.

Environmental Footprint of Hardware
Infrastructure: TC-SI-130a.3

SocialGRI 401: Employment

7

Code of Conduct
Human Rights Policy

Human Rights: Relevant policies, procedures,
activities
Labour: Relevant policies, procedures, activities.

Includes disclosures 103-1 Explanation of the material topic and its boundary, 103-2 The management approach and its components, disclosure 103-3 evaluation of the management approach.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

32

2020 Content Index
GRI Management Approach Crossreference7

GRI Material Topic

Relevant External Entities

UNGC Cross-reference

SASB Cross-reference

Social (continued)
GRI 404: Training and Education

Our People, p. 21

Labour: Relevant policies, procedures,
activities.

GRI 405: Diversity and Equal Opportunity

Our People, p. 22-24
Human Rights Policy

Human Rights: Relevant policies,
procedures, activities.
Labour: Relevant policies, procedures,
activities.

GRI 412: Human Rights

Commitment to Human Rights, p. 18
Code of Conduct
Conflict Minerals Policy
Human Rights Policy
Corporate Responsibility Policies

GRI 417: Marketing and Labeling2020 10-K, p. 7

Customers
Governments andregulators

GRI 418: Customer Privacy

Your Information, p. 12-13
NortonLifeLock Privacy
NortonLifeLock Product andServices Privacy Notices
NortonLifeLock Global Privacy
Statement

Customers
Governments andregulators

Human Rights: Relevant policies,
procedures, activities.

Data Privacy and Freedom of Expression: TC-SI-220a.1
Your Information, p. 12-13
NortonLifeLock Privacy
NortonLifeLock Global Privacy Statement
Human Rights: Relevant policies,
procedures, activities.

Data Privacy and Freedom of Expression: TC-SI-220a.2
NortonLifeLock Global Privacy Statement

Data Privacy and Freedom of Expression: TC-SI-220a.3
No monetary losses incurred as a result of legal proceedings associated withincidents relating to user privacy in FY20.
Data Privacy and Freedom of Expression: TC-SI-220a.4
We do track this information, however the number is confidential. We do not publicly
disclose any information concerning government and law enforcement requests.
However, in many instances, the request does not result in a disclosure to therequesting party as we do not have the information sought by the request.
Data Privacy and Freedom of Expression: TC-SI-220a.5
NortonLifeLock does not allow any monitoring or censoring in our products. In areas
where our products are prohibited by the government, we don’t sell them there. (eg.
VPNs in China).

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

33

2020 Content Index
GRI Material TopicGRI Management Approach Crossreference7

Relevant External Entities

UNGC Cross-reference

GRI 418: Customer Privacy(continued)

SASB Cross-reference
Data Security: TC-SI-230a.1
NortonLifeLock defines a “breach” as a cybersecurity incident reported to the FTC
during the financial year.
There were zero breaches in FY20.
Data Security: TC-SI-230a.2
Your Information, p. 12-13
NortonLifeLock Privacy
NortonLifeLock Product and Services Privacy Notices
NortonLifeLock Global Privacy Statement

GRI 200-400: Topic-Specific Disclosures 2016
Disclosure

GRI Description

Cross-reference, Explanation, orOmission

Direct economic value generated anddistributed

Performance Tables, p. 27
2020 10-K

UNGC Cross-reference

SASB Cross-reference

GRI 201: Economic Performance
201-1

Activity Metrics: TC-SI-000.A(1) Cloud Subscriptions
a. AWS – 53
b. Azure – 38(2) 100% Cloud Based
Activity Metrics: TC-SI-000.B(1) 120 Nodes in on-prem and 2800 Cloud Nodes(2) 95% Outsourced to Cloud
Activity Metrics: TC-SI-000.C(1) NortonLifeLock has roughly 1.5PB storage capacity under its operational control
Financial implications and other risks
and opportunities due to climatechangeWe have conducted an analysis of
our climate change risk and have not
identified any climate-related risks withthe potential to have a substantive
financial or strategic impact on ourbusiness.

Environment: Relevant policies,
procedures, activities.

205-1

Operations assessed for risks related tocorruption

Two out of four, or 50%, of internal audits
conducted in FY20 had a direct link to therisk of fraud.

Anti-corruption: Relevant
policies, procedures, activities.

205-2

Communication and training about
anticorruption policies and procedures

Anti-Corruption remains a key topic within
our mandatory annual Code of Conduct
training.

Anti-corruption: Relevant
policies, procedures, activities.

201-2

GRI 205: Anti-corruption

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

34

2020 Content Index
Disclosure

GRI Description

Cross-reference, Explanation, or Omission

UNGC Cross-referenceNone.

Anti-corruption: Measurementof outcomes.

SASB Cross-reference

GRI 205: Anti-corruption (continued)
205-3

Confirmed incidents of corruption andactions taken

GRI 206: Anti-competitive Behavior
206-1

Legal actions for anti-competitive behavior,anti-trust, and monopoly practices

Intellectual Property Protection & Competitive Behavior: TC-SI-520a.1
None
Managing Systemic Risks from Technology Disruptions: TC-SI-550a.1(1) 19 performance issues(2) 5 service disruptions(3) 192:43 hours
TC-SI-550a.2
Our Business Continuity Program considers risk to key functions and operations to prevent the company
from sustaining unacceptable financial and operational impacts and minimizing any public or industry
image impacts. A business impact assessment (BIA) is used to identify critical business activities
with associated maximum allowable outages and recovery time objectives. Documented plans containobjectives and procedures for recovery strategies, including technology redundancies. Annual plan
testing is conducted to ensure identified recovery strategies are effective and applicable. Action items
and areas of opportunity are tracked during the exercise and plan modifications are made accordingly
and documented.

GRI 302: Energy
302-1

Energy consumption within the organization

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

302-2

Energy consumption outside of theorganization

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

302-3

Energy intensity

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

302-4

Reduction of energy
consumption

The World, p. 19
Performance Tables, p. 30

Environment: Measurement ofoutcomes.

Environmental Footprint of Hardware Infrastructure
TC-SI-130a.1(1) 117,728 GJ(2) 80%(3) 31%

GRI 305: Emissions
305-1

Scope 1 GHG Emissions

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

305-2

Scope 2 GHG Emissions

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

305-3

Scope 3 GHG Emissions

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

35

2020 Content Index
Disclosure

GRI Description

Cross-reference, Explanation, or Omission

UNGC Cross-reference

SASB Cross-reference

GRI 305: Emissions (continued)
305-4

GHG emissions intensity

Performance Tables, p. 30

Environment: Measurement ofoutcomes.

305-5

Reduction of GHG emissions

The World, p. 19

Environment: Measurement ofoutcomes.
Environmental Footprint of Hardware Infrastructure: TC-SI-130a.2
As a newly developed company, and one that is undergoing a broad restructuring effort that
includes the sale of several commercial buildings (still to be completed), it is difficult at this timeto accurately collect, report and verify water data covering FY20 (April 1, 2019 to April 3rd, 2020).
For many years in the past, Symantec achieved third party “limited assurance” verification that
included our water withdrawal data. While we were unable to complete external assurance thisyear, we plan to seek external verification again next year when we are more established and haveour first full year of baseline data for FY21. We are currently unable to include an estimate of FY20
total water use, but plan to quantify and report water data once we are more established as acompany and have our first full year of baseline data for FY21.

GRI 401: Employment
401-1

New employee hires and employee turnover2020 10-K, p. 10

Labour: Measurement ofoutcomes.
Recruiting & Managing a Global, Diverse & Skilled Workforce: TC-SI-330a.1
Performance tables, p. 27-29, The percentage of employees that are foreign nationals is 8%
The percentage of employees that are located offshore from the entity’s country of domicile is 53%

401-2

Full-time benefits not provided totemporary/ part-time employees

401-3

Parental leave

INTRODUCTION

Employees actively working at least 20 hours per
week are eligible to participate in NortonLifeLock’s
Benefit Programs. Employees who actively work lessthan 20 hours per week are eligible, at a pro-rated
rate, for our paid time off/vacation and company
paid holidays.
·
Life insurance·
Healthcare·
Disability·
Leaves of Absence·
Retirement·
EAP·
Voluntary Insurance Programs·
Wellness

Labour: Relevant policies,
procedures, activities.

Labour: Relevant policies,
procedures, activities.

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

36

2020 Content Index
Disclosure

GRI Description

Cross-reference, Explanation, or Omission

UNGC Cross-reference

Our People, p. 21

Labour: Relevant policies,
procedures, activities.

Performance Tables, p. 27-29

Labour: Measurement ofoutcomes.

SASB Cross-reference

GRI 404: Training and Education
404-2

Programs for upgrading employee skills
and transition assistance programs

GRI 405: Diversity and Equal Opportunity
405-1

Diversity of governance bodies andemployees

2020 10-K, p. 4

Recruiting & Managing a Global, Diverse & Skilled Workforce
TC-SI-330a.3
Performance tables, p. 27-29

2019 Proxy and Annual Report, p. 2

GRI 412: Human Rights Assessment
412-2

Employee training on HR policies orprocedures

NortonLifeLock requires all employees to taketraining on our Code of Conduct, Workplace
Harassment Training and FTC All Employee Training

Human Rights: Relevant
policies, procedures, activities.
Labour: Relevant policies,
procedures, activities.

GRI 413: Local Communities
413-1

Operations with local community
engagement, impact assessments, anddevelopment programs

The World, p. 14-17
Performance Tables, p. 30 (employee volunteering)

Recruiting & Managing a Global, Diverse & Skilled Workforce
TC-SI-330a.2
As of May 2019, NortonLifeLock’s employee engagement percentage was 73%.

GRI 414: Supplier Social Assessment
414-1

New suppliers that were screened usingsocial criteria

The World, p. 14-17

Human Rights: Relevant
policies, procedures, activities.

414-2

Negative social impacts in the supply chain
and actions taken

None

Human Rights: Measurementof outcomes.

GRI 417: Marketing and Labeling
417-3

Incidents of non-compliance concerningmarketing communications

None.

GRI 418: Customer Privacy
418-1

7

Incidents of non-compliance concerningmarketing communications

Details are confidential.

Includes disclosures 103-1 Explanation of the material topic and its boundary, 103-2 The management approach and its components, disclosure 103-3 evaluation of the management approach.

INTRODUCTION

APPROACH

YOUR INFORMATIONCOMMUNITIESENVIRONMENTOUR PEOPLEPERFORMANCE DATA TABLE

GRI AND SASB INDEX

37

Copyright © 2020 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the
LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries.