Company: HUM
Filing Date: 2025-03-07
Form Type: DEF 14A
Source: 0001193125-25-048976
Chunk: 11

Company: HUMANA INC
Filing Date: 2025-03-07
Form: DEF 14A
Chunk 11
---
 Strategic Execution |     | • Brand Reputation • Investment Objectives |     | • Cybersecurity • Data Governance |     | • Financial • Clinical Quality |

| Committees of the Board of Directors |

| Audit   •  Financial Statement integrity and reporting •  Legal, regulatory and compliance •  Internal controls •  Cybersecurity 
 risk oversight                                                                                                                   |     | Organization & Compensation   •  Executive and non-executive compensation policies and practices •  Succession planning •  Human capital management |                                                                                                                                 |     | Nominating, Governance & Sustainability |     | Technology   •  Information security, technology, privacy & data protection •  Company IT strategy and consumer facing technology |     | Investment   •  Investment objectives and policies •  Investment 
 results and performance evaluation                               |     | Clinical    Quality   •  Clinical management •  Healthcare 
 quality                                                    |
|                                                                                                                                  |     |                                                                                                                                                     | •  Governance structure and processes •  Legal and policy matters •  Stockholder concerns •  Board refreshment •  ESG oversight |     |                                         |     |                                                                                                                                   |     |                                                                  |     |                                                            |

| Management |

| Business units identify and manage business risks; Central functions design risk framework (setting boundaries and monitoring risk appetite); and Internal Audit provides independent assurance on design and effectiveness of internal controls and governance processes. |

| 18 |     | Humana | 2025 Proxy Statement • Corporate Governance |

The Company’s Enterprise Risk Management (ERM) governance structure consists of oversight from the Board and the Audit Committee (in collaboration with material risks overseen by other committees), and implementation through the Company’s management team utilizing a three lines of defense model to delegate responsibility for critical risk management processes across the business functions and operational areas, as well as risk management, compliance, and internal audit teams. Humana’s first line of defense consists of business areas and operational teams across the Company, and is responsible for identifying, assessing, mitigating, monitoring, and managing risk within their respective areas. The Company’s Enterprise Risk Management and Regulatory Compliance departments represent the Company’s second line of defense. These teams are