Company: NCNO
Filing Date: 2025-04-29
Form Type: PRE 14A
Source: 0001193125-25-103772
Chunk: 21

Company: nCino, Inc.
Filing Date: 2025-04-29
Form: PRE 14A
Chunk 21
---
 membership criteria, and board committee composition. Our corporate governance guidelines can be found on our website at www.investor.ncino.com.**

<div align='center'>16</div>

**Role of the Board and its Committees in Risk Oversight

One of the key functions of our board of directors is informed oversight of our risk management process. Our board of directors recognizes the importance of effective risk oversight in running a successful business and in fulfilling its fiduciary responsibilities and is responsible for ensuring that an appropriate culture of risk management exists within the Company, monitoring and assessing strategic risk exposure, and focusing on how we address specific risks, such as cybersecurity and technology risks, brand and reputation risks, strategic and competitive risks, operational risks, financial risks, and legal and compliance risks. Our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors does not have a standing risk management committee, but rather administers this oversight function directly through our board of directors as a whole, as well as through its standing committees that address risks inherent in their respective areas of oversight. In particular, our board of directors is responsible for monitoring and assessing strategic risk exposure, including a determination of the nature and level of risk appropriate for the Company. The Company’s Audit Committee is responsible for overseeing the management of risks associated with our financial statements, compliance with legal and regulatory requirements, the qualifications and independence of the Company’s external auditor, cybersecurity, privacy, and the performance of our internal auditing department and external auditor. Our Compensation Committee reviews our employee compensation practices and policies as they relate to risk management and risk-taking incentives to determine if such compensation policies and practices are reasonably likely to have a material, adverse effect on the Company. Our Nominating and Corporate Governance Committee oversees the management of risks associated with corporate governance, director independence, composition and organization of our board of directors, ESG efforts, and related risks.

Cybersecurity

The Audit Committee reviews, at least annually, the Company’s cybersecurity and information security risk exposures, and the steps management has taken to monitor and control such exposures. The Audit Committee also oversees the Company’s cyber incident preparedness and responses. As part of its independent oversight of the risks facing the Company, our board of directors devotes time and attention to cybersecurity and information security risk as well as cyber incident preparedness and response. Typically, our board of directors as a whole meets with the key employees responsible for risk management, including cybersecurity, at least annually. The Company maintains an Information Security Committee led by the Company’s