Company: TDDWW
Filing Date: 2025-04-24
Form Type: DEF 14A
Source: 0001104659-25-038699
Chunk: 25

Company: TIDEWATER INC
Filing Date: 2025-04-24
Form: DEF 14A
Chunk 25
---
 and responsibilities; (iii) coordinating with the Chief Executive Officer in the setting of the agenda and the preparation and distribution of information packages and related matters for Board meetings; and (iv) serving as liaison between management and the Board. The Board believes that its programs for risk oversight, as described under “Role of the Board in Risk Oversight” below, would be effective under a variety of leadership frameworks. Accordingly, the Board’s risk oversight function did not significantly impact its selection of the current leadership structure. 25 TABLE OF CONTENTS Executive Sessions of Non-Management and Independent Board Members Our non-management and independent directors meet in regularly scheduled executive sessions presided over by our independent Chairman, Mr. Fagerstal. Prior to his appointment as Chairman in June 2023, Mr. Fagerstal served as our Lead Independent Director and presided over regularly scheduled executive sessions with only independent directors in attendance. At the conclusion of each Board meeting, the non-management directors and independent directors have an opportunity to meet in executive session and may schedule additional executive sessions throughout the year. During fiscal 2024, the independent members of our Board met four times in executive sessions. 26 TABLE OF CONTENTS Role of the Board in Risk Oversight The Board actively oversees Tidewater’s risk management, including routinely assessing Tidewater’s major risks and mitigation measures. In addition, the Board delegates to its committees the responsibility for overseeing certain types of risk, as reflected in the chart below, and the committees in turn report regularly to the Board on activities in their respective areas of oversight. 27

TABLE OF CONTENTS

| ​ | ​ | Risk Oversight Highlight: Cybersecurity                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | ​ | ​ |
| ​ | ​ | Our business requires the use of information technology (IT) and operational technology (OT) resources, including those to carry out our day-to-day operational activities both onshore and offshore, to maintain our business records and to proactively monitor internal and external cybersecurity threats. To respond to cybersecurity risks and threats, we have developed a cybersecurity risk management program designed to identify, assess, manage and respond to cybersecurity incidents while also preserving the confidentiality, integrity and continued availability of our information and assets. The underlying controls of our cyber risk management program are based on recognized best practices and standards for cybersecurity and information technology, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and the International Organization for Standardization (ISO) 27001 Information Security Management System Requirements.