Company: OC
Filing Date: 2025-03-14
Form Type: DEF 14A
Source: 0001370946-25-000125
Chunk: 16

Company: Owens Corning
Filing Date: 2025-03-14
Form: DEF 14A
Chunk 16
---
AIR AND CEO EVALUATION PROCESS

Each year, the Governance and Nominating Committee facilitates a process to evaluate the effectiveness of the Board, its committees, and the Chair and CEO.

The Board and its committees complete self-evaluation questionnaires that assess effectiveness in several areas, including composition, structure, and processes. The completed questionnaires are summarized by a third-party law firm to ensure independence and non-bias in the process. The non-management directors individually discuss the results with the Lead Independent Director. The Lead Independent Director and committee chairs then review the evaluation results at the Board and committee levels, respectively, to discuss and incorporate feedback. The Governance and Nominating Committee utilizes the results of this robust and thorough process to recommend changes to Board processes, to determine critical skills required of prospective director candidates and to make recommendations for committee assignments.

The Governance and Nominating Committee also prepares and circulates evaluations to the independent directors regarding the performance of the Chair and CEO in several key performance areas. Non-management directors discuss their feedback on the Chair and CEO with the Lead Independent Director. The results of the process are discussed in an executive session of the non-management directors and are also factored into the Compensation Committee’s performance evaluation of the Chair and CEO.

### RISK OVERSIGHT
The Board oversees the Company’s identification and management of enterprise risks. Some of the Board’s responsibilities for risk oversight processes have been delegated to its relevant committees.

RISK OVERSIGHT RESPONSIBILITIES OF THE BOARD’S COMMITTEES

In addition to facilitating oversight of financial risks, the Audit Committee has primary responsibility for facilitating the Board’s process of oversight with respect to the Company’s management of key risks generally. Pursuant to its charter, the Audit Committee’s responsibilities include reviewing annually and receiving periodic updates on the Company’s identification of its key risks, major financial exposures, and related mitigation plans.

In addition to the Audit Committee, the Compensation, Finance, and Governance and Nominating Committees each review and evaluate risks associated with their respective areas. Each of the Board committees provides reports concerning its respective risk oversight activities to the Board and the Board considers and discusses such reports.

#### OVERSIGHT OF CYBERSECURITY RISKS
The Board has delegated responsibility to the Audit Committee for overseeing the cybersecurity risk management strategy for the Company. The Audit Committee receives regular updates at least twice a year on our cybersecurity risk management process from members of management, including our Chief Information Officer (“CIO”). The Audit Committee reviews our comprehensive cybersecurity framework, including reviewing our cybersecurity reporting protocol that provides