Company: AFGC
Filing Date: 2025-04-04
Form Type: DEF 14A
Source: 0001140361-25-012231
Chunk: 32

Company: AMERICAN FINANCIAL GROUP INC
Filing Date: 2025-04-04
Form: DEF 14A
Chunk 32
---
 risks. The risk officer works with management to identify potential events and trends that may adversely or favorably impact the Company and to manage risks to be within the Company’s risk appetite. The ERC, the risk officer, and individual senior leader risk owners regularly monitor the top organizational risks, as well as any other significant or emerging risks that may arise during the year and consider whether to modify existing risks or add new risks. Assessments of AFG’s significant risks are completed on either a quarterly, semiannual, or annual basis. Any actual or foreseeable potential variances outside of AFG risk targets, even for reasons that are expected or accepted, are discussed with risk owners, risk monitors, and management. Significant changes in our risk profile are reviewed with the ERC and the AFG Audit Committee on a quarterly basis and with the AFG Board of Directors at least annually. Also, due to evolving threats to corporate cybersecurity, the Board and Audit Committee receive reports from the Company’s Chief Information Security Officer (CISO) regarding cybersecurity risks and the steps management has taken to monitor and control such risks. The CISO presents to the Audit Committee at least quarterly and to the Board at least annually to review and discuss the Company’s cybersecurity program. The Company’s leadership structure and overall corporate governance framework is designed to aid the Board in its oversight of management responsibility for risk. The Audit Committee serves a key risk oversight function in carrying out its review of the Company’s financial reporting and internal reporting processes, as required by the Sarbanes-Oxley Act of 2002. Inherently, part of this review involves an evaluation of whether our financial reporting and internal reporting systems are adequately reporting the Company’s exposure to certain risks. In connection with this evaluation, the Audit Committee has, from time to time, considered whether any changes to these processes are necessary or desirable. While it has concluded that no such changes are warranted at this time, the Audit Committee will continue to monitor the Company’s financial reporting and internal reporting processes. In addition, pursuant to its charter, the Audit Committee is responsible for discussing with management the guidelines and policies related to enterprise risk assessment and risk management and assisting the Board of Directors in its oversight of the Company’s enterprise risk management process. As more fully described in the “Compensation Discussion and Analysis” section of this proxy statement, the Compensation Committee takes an active role in overseeing risks relating to AFG’s executive compensation programs, plans and practices. Specifically, the

| 342025 Proxy Statement | American Financial Group |

TABLE OF CONTENTS Corporate Governance