Company: VRE
Filing Date: 2025-04-29
Form Type: DEF 14A
Source: 0000924901-25-000035
Chunk: 38

Company: Veris Residential, Inc.
Filing Date: 2025-04-29
Form: DEF 14A
Chunk 38
---
 employees and periodically conducts tests to assess employee comprehension and evaluate training effectiveness.

The Company is not currently aware of any risks from cybersecurity threats nor has the Company previously had a cybersecurity incident that in either case have materially affected or are reasonably likely to materially affect the Company, its business strategy, results of operations or financial condition.

CYBERSECURITY GOVERNANCE

The Company's Audit Committee holds oversight responsibility over the cybersecurity strategy and risk management. The Audit Committee engages in regular discussions with executive management regarding the Company's significant financial risk exposures and the measures implemented to monitor and control these risks, including those that may result from material cybersecurity threats. The Company prepares a quarterly report from the Chief Operating Officer and the CISO which includes updates on the Company's current cybersecurity maturity, progress on the Company's previously mentioned multi-year cybersecurity plan, strategy updates to combat changes in the threat landscape, education of employees and executive management on cybersecurity awareness, enhanced cybersecurity defenses, incident response programs and regulatory reporting obligations. The Audit Committee delivers a summary of these reports to the full Board of Directors on a quarterly basis. Furthermore, the Board of Directors receives a direct report from the CISO on no less than an annual basis with interim reports provided when appropriate or necessary.

As part of the Company's incident response plan, a committee known as the Cyber ERM (Enterprise Risk Management) Committee has been established comprising cross-functional representation across the Company. The Cyber ERM is responsible for implementing a rapid response and incident program in the event of an identified cybersecurity threat and is responsible for reporting all incidents to the Audit Committee and Board of Directors in the case of any cybersecurity incident to enable the Audit Committee and Board of Directors to assess the materiality of any such incident and determine any Exchange Act reporting obligations of the Company in connection therewith.

#### BOARD AND COMMITTEE GOVERNANCE
Our Board of Directors remains committed to the highest standard of corporate governance. Our amended and restated bylaws generally allow stockholders to propose amendments to the bylaws for approval by the stockholders. Our bylaws also provide for majority voting in the election of directors, whereby each director nominee that is not elected by a majority of the votes cast in an uncontested election of directors is now required to tender their resignation for consideration by the NESG Committee.

During 2024, the entire Board of Directors met seven (7) times and acted twelve (12) times by unanimous written consent. In 2024, no director attended fewer than 75% of the aggregate of: (i) the total number of meetings of