Company: VRE
Filing Date: 2025-04-29
Form Type: DEF 14A
Source: 0000924901-25-000035
Chunk: 36

Company: Veris Residential, Inc.
Filing Date: 2025-04-29
Form: DEF 14A
Chunk 36
---
 labor, human trafficking and slavery, health and safety, discrimination and prejudice.

GRIEVANCE MECHANISM

The Company has a strict non-retaliation policy to encourage employees to raise issues and report concerns of misconduct and in 2022 introduced a third-party anonymous hotline for the reporting of any concerns by employees or other stakeholders.

SUPPLY CHAIN

It is important to us that our suppliers and partners operate ethically and share the Company’s ESG business principles. Our supply chain governance procedures introduced in 2020 and summarized in the Supplier Code of Conduct ensures our suppliers are aware of the standards and business practices we expect from them.

STAKEHOLDER ENGAGEMENT

Our main stakeholder groups include stockholders, employees, tenants and residents, suppliers, industry associations, communities, NGO advocacy and activist groups, governmental organizations and regulatory bodies, media and competitors. We engage with our stakeholders regularly and through multiple channels and take their feedback into account when assessing and preparing our corporate sustainability strategy.

CYBERSECURITY RISK MANAGEMENT

The Company's information technology, communication networks, system applications, accounting and financial reporting platforms and related systems, and those that are offered to residents and tenants are integral to the operation of the business. The Company utilizes these systems, among others, for financial analysis, management, and reporting, for facilitation of operations, including monitoring and optimization of various building management systems, for initiation, generation, and completion of resident leasing, for internal communications, and for various other aspects of the business.

The Company's cybersecurity strategy focuses on detection, protection, incident response, security risk management and mitigation, and resiliency of the cybersecurity infrastructure. The Company has implemented or is in the process of continuously evaluating, testing and updating various information security processes and policies designed to identify, assess and manage material risks from cybersecurity threats to the Company's critical computer networks, third-party hosted services, communications systems, hardware and software, and critical data, including confidential information that is proprietary, strategic or competitive in nature, as well as any personally identifiable information related to the Company's residents' and employees' personal data.

The Company's cybersecurity risk management relies on a multidisciplinary team, including its information technology and cybersecurity team, legal department, executive management, and third-party service providers to identify, assess, and manage cybersecurity threats and risks. In 2023, the Company expanded its team by adding a full-time Chief Information Security Officer (CISO), reporting directly to the Chief Operating Officer, responsible for managing the internal and external cybersecurity resources. The CISO