Company: GEF
Filing Date: 2025-11-19
Form Type: 10-KT
Source: 0001628280-25-053146
Chunk: 36

Company: GREIF, INC
Filing Date: 2025-11-19
Form: 10-KT
Chunk 36
---
 financial condition.

#### Governance and Oversight
Board Oversight

While our Board has responsibility for oversight of risk management on an enterprise-wide basis, it has delegated certain risk oversight responsibilities to its committees. The Audit Committee of our Board of Directors has responsibility for oversight of our cybersecurity risk management program.Full responsibilities of the Audit Committee are set forth in the publicly available Audit Committee Charter on our website. The Audit Committee receives quarterly cybersecurity updates covering risks, mitigation plans, and cybersecurity incidents. The full Board of Directorsis provided with periodic cybersecurity updates from the CIDO or the CISO, or both.

In the event of an urgent cybersecurity incident where full Audit Committee or Board involvement is not practical or timely, the Chairperson of the Board of Directors, the Chairperson of the Audit Committee, and the Chief Executive Officer have been appointed as an incident oversight group.

#### Management Oversight
The CISOhas primary responsibility for the management of ongoing cyber risks under the oversight of the CIDO. The CISO holds a Certified Information Systems Security Professional certification and has nearly 30 years of experience in technology, including over 10 years in software development and enterprise architecture and over 15 years implementing, maturing and leading cybersecurity programs. The CIDO is responsible for global IT strategy and operations and has nearly 30 years of experience leading enterprise technology organizations. The CIDO and CISO, together with others on their teams, are informed about the monitoring, prevention, detection, mitigation and remediation of cybersecurity incidents through their management of and participation in the cybersecurity risk management policies, processes and operations discussed above.

The Company’s management team has designated a Cybersecurity Advisory Council (the “Council”), which consists of members of management, including the CISO and a cross-section of Company leaders. The Council ensures strong alignment within the Company with the objectives of the cyber program, providing input on policy and risk decisions. The Council receives periodic briefings on security status, incidents, and mitigation plans.

<div align='center'>20</div>

#### Table of Contents

## ITEM 2. PROPERTIES
In the U.S., we have 99 principal manufacturing locations in 31 states. Additionally, we have 76 principal manufacturing locations in 21 other countries. Globally, 92 principal manufacturing locations are owned while 83 are leased. A principal manufacturing location means a manufacturing facility located in a country with net sales in excess of 0.5 percent of the Company’s consolidated net sales.

Many of the domestic and international principal manufacturing locations manufacture multiple products across different business segments. Customized Polymer Solutions