Company: BA
Filing Date: 2025-03-07
Form Type: DEF 14A
Source: 0001193125-25-049921
Chunk: 24

Company: BOEING CO
Filing Date: 2025-03-07
Form: DEF 14A
Chunk 24
---
 composed entirely of independent directors.

| Key Focus Areas and Activities in 2024                                                                                                                                                                                                                                                                                                  |
| •   Reviewed proposals and bids for proprietary opportunities   •   Reviewed the progress made on safety and quality of classified programs   •   Oversaw financial and operational performance of classified programs   •   Reviewed supplier challenges, customer expectations and security procedures related to classified programs |

| 30 |     | 2025 Proxy Statement |

CORPORATE GOVERNANCE Risk Oversight With over 100 years at the forefront of innovation, Boeing takes measured risks each day and has established processes to identify, assess, mitigate and manage these risks. Senior management is responsible for day-to-daymanagement of risks, including the implementation of appropriate risk management policies and procedures, as well as effective risk management controls. The Board is responsible for overseeing management in the execution of its risk management responsibilities and for assessing the Company’s global approach to risk management. The Board participates in regular briefings with management on a variety of topics, including strategy, operations, development programs, legal and regulatory matters, cybersecurity, digital transformation and artificial intelligence, human capital management, and sustainability, in which risk oversight is an inherent element. In addition, each of the three business unit leaders briefs the Board at each regular meeting on key issues facing their business unit, which briefings include a discussion of risks. All of our directors have risk management expertise. The Board believes that a fundamental part of risk management is understanding the many strategic, operational, financial and compliance risks, while prioritizing our core values of safety, quality, integrity and sustainability. We take an integrated approach to risk management across the Company with coordination among our enterprise risk management (ERM) process, compliance risk management (CRM) process and our SMS Risk Register. Enterprise Risk Management and Compliance Risk Management Our ERM process evaluates the Company’s current and emerging key strategic risks, such as those relating to labor, geopolitics, long-term competitiveness, reputation, talent, and sustainability, and key operational risks, such as those relating to product safety, development program execution, supply chain, production system health and quality, cybersecurity, and liquidity, as well as mitigation efforts. Our CRM process evaluates the Company’s current and emerging compliance risks, such as those relating to design and certification, production and quality, cybersecurity, defense contractor business systems, and financial accounting and disclosures. Our ERM and CRM processes are continually evolving in the detection and response to risks, including through