Company: CLX
Filing Date: 2025-08-08
Form Type: 10-K
Source: 0000021076-25-000039
Chunk: 47

Company: CLOROX CO /DE/
Filing Date: 2025-08-08
Form: 10-K
Item: Item 1A
Chunk 47
---
 practices of the Company. The CISEC supports the Company’s objective of maintaining a strong cybersecurity posture and culture by overseeing alignment between the Company’s cybersecurity objectives and business goals, risk exposure, and compliance requirements. The CISEC is chaired by the CISIO and includes in its membership the CIDO and Chief Legal and External Affairs Officer, who are both members of the Clorox Executive Committee, as well as the Chief Accounting Officer and Controller and the Vice President, Internal Audit, among other management. The CISIO also provides 

21

periodic reports to the Clorox Executive Committee and to the Audit Committee. These reports may include updates on critical information security and cybersecurity risks and the threat landscape; cybersecurity improvement initiatives, the internal control environment, ongoing internal audit activities; and, if relevant, the status of actions taken with respect to significant cybersecurity incidents. 

Board of DirectorsThe Board, through the Audit Committee, is responsible for the oversight of the Company’s compliance with legal and regulatory requirements relating to data privacy, cybersecurity and IT risks and its framework and guidelines with respect to risk assessment and risk management. The Audit Committee receives quarterly updates on the topics set forth above from the CISIO, CIDO, and Chief Legal and External Affairs Officer. 

The Board retains responsibility for the overall process of assessing and managing major risks facing the Company and receives updates regarding information security and cybersecurity risks as part of its oversight of ERM. The CIDO and Chief Legal and External Affairs Officer provide quarterly updates to the Board on topics that may include information security and cybersecurity matters. The Board may also be notified and engaged as part of the Company's cybersecurity incident response plans, depending on the severity of the impact of an incident. The Board and Audit Committee include directors with knowledge, skills and experience in data security, privacy, IT governance, and management of cyber risks.