Company: BLCO
Filing Date: 2025-04-10
Form Type: DEF 14A
Source: 0001140361-25-013244
Chunk: 18

Company: Bausch & Lomb Corp
Filing Date: 2025-04-10
Form: DEF 14A
Chunk 18
---
 oversees risks relating to (i) the Company’s product pipeline; (ii) R&D initiatives; and (iii) regulatory matters.

| 2025 PROXY STATEMENT23 |

TABLE OF CONTENTS Under the supervision of the Board, management is responsible for assessing and managing the exposure to various risks. We have a global Enterprise Risk Management (“ERM”) office. The objectives of the ERM office include, but are not limited to, managing known risks through assessments and action plans, identifying emerging risks and reporting on the ERM process and risk findings to the Audit and Risk Committee on a quarterly basis. Cybersecurity Cybersecurity risk management is an integral part of our overall ERM program. In order to assess, identify, manage and address the risk of cybersecurity threats or incidents, we have established a Cybersecurity Risk Management Program, which uses a risk-based approach to implement multi-layered controls designed to enable Bausch + Lomb to maintain agility while protecting critical infrastructure and data. This program implements controls and frameworks designed to align with industry best practices, including those based on the National Institute of Standards and Technology Cybersecurity Framework, the Sarbanes-Oxley Act of 2002 and the Health Insurance Portability and Accountability Act (“HIPAA”). The Cybersecurity Risk Management Program is designed to identify potential vulnerabilities and threats and develop strategies to mitigate and remediate them. To assess, identify, manage, address and minimize the effects of a cybersecurity threat or incident, or a series of related cybersecurity threats or incidents, we undertake a range of activities, including monitoring our systems and networks, incident response planning, and employee training. We also have business continuity and disaster recovery plans in place in the event of a cybersecurity incident, which are regularly reviewed and updated as needed. We also regularly engage third-party assessors, consultants, auditors, and other experts to help identify, assess and address potential threats or incidents. For further information on the corporate governance structures we employ as part of our Cybersecurity Risk Management Program, please refer to our Annual Report. Environmental, Social and Governance As stated in our Sustainable Business Policy, Bausch + Lomb is committed to supporting and enhancing the communities in which we operate and continuously reducing the environmental impacts of our products, supply chain, manufacturing, distribution, sales and administrative support functions. Our sustainability principles are designed to support the achievement of Bausch + Lomb’s business objectives, meet the needs of patients, customers, consumers, regulators, and stakeholders today, while protecting and sustaining the community, the environment, and natural resources so they