Company: CCNE
Filing Date: 2025-02-20
Form Type: S-4
Source: 0001193125-25-030821
Chunk: 82

Company: CNB FINANCIAL CORP/PA
Filing Date: 2025-02-20
Form: S-4
Chunk 82
---
 most employees and introduced digital business cards with QR codes to allow for contact information to be easily shared while reducing paper waste and demands on the paper-generating environmental footprint. |

| • |     | In 2024, CNB completed the new regional headquarters for Ridge View Bank, a division of CNB Bank. As part of CNB’s efforts to achieve Green Globe certification for this new building, several new policies were implemented at this location, aligning with the standards established by the Green Building Initiative. These initiatives include enforcing a non-smoking policy within 25 feet of the building, adopting sustainable water management practices, ensuring transparency in energy usage, and promoting the responsible disposal of electronic hardware and confidential documents. |

Cybersecurity Given the critical nature of data privacy and cybersecurity, CNB maintains robust processes for assessing, identifying, and managing material risks from cybersecurity threats. The CNB Board of Directors is responsible for overseeing the assessment and management of enterprise-level risks that may impact CNB. The Audit Committee has primary responsibility for overseeing risk management, including oversight of risks from cybersecurity threats. The boards of directors of CNB and CNB Bank have also established an IT Committee, consisting of at least three independent directors, along with non-votingmembers from management, including the President and CEO, the Chief Financial Officer, the Chief Information Technology & Security Officer, the Senior Vice President of Operations, the Vice President of Information Technology, and the Vice President of Information Security. The IT Committee assists the boards of directors of CNB and CNB Bank in fulfilling their respective governance responsibilities for CNB’s information technology and related data security infrastructure under relevant regulatory safety and soundness requirements. Management reports on cybersecurity matters regularly to the CNB Board of Directors, primarily through the Audit Committee and IT Committee, including an annual report regarding specific risks and mitigation efforts within CNB Bank and a three-yearcybersecurity threat assessment conducted by third-party experts. In addition, cybersecurity training is provided to the full CNB Board of Directors to educate directors on the current cyber threat environment and measures companies can take to mitigate risk and impact of cyber attacks. Several members of the CNB Board of Directors, including the Chairperson of the Audit Committee, also have cybersecurity experience. Please see CNB’s Annual Report on Form 10-Kfor the year ended December 31, 2023 for more information on CNB’s processes and procedures for addressing and managing cybersecurity risks. 53

<div align='center'>**COMPENSATION OF CNB DIRECTORS**</div>

**The ECC