Company: VCYT
Filing Date: 2025-04-29
Form Type: DEF 14A
Source: 0001384101-25-000051
Chunk: 18

Company: VERACYTE, INC.
Filing Date: 2025-04-29
Form: DEF 14A
Chunk 18
---
 operational planning, strategic biopharmaceutical partnerships and material opportunities, executive talent acquisition, retention, and development, compensation and evaluation, reputational, regulatory and legal compliance including those laws and regulations relating to product and service promotional activities, Medicare billing and reimbursement and provision of laboratory services, cybersecurity, privacy and financial reporting and internal controls. The Board of Directors considers strategic risks and opportunities and regularly receives reports from executive management regarding specific aspects of risk management, including but not limited to, our ability to expand our platform, products and services globally and our ability to potentially inform diagnosis and treatment decisions in new oncology indications. Our Board of Directors reviews strategic and operational risk in the context of discussions, question-and-answer sessions and reports from the management team at each regular Board of Directors meeting, receives reports

#### 18Veracyte2025 Proxy Statement

#### Corporate Governance
on all significant committee activities at each regular Board of Directors meeting, and evaluates the risks inherent in significant transactions. Management, under oversight of the Audit Committee, conducts an annual enterprise risk management assessment to assess key enterprise risks over different time horizons: short-term (current to six months), mid-term (six to twelve months) and long-term (more than twelve months). Following such assessment, key risk areas are shared with the Audit Committee and management assigns owners to each risk who are tasked with reviewing and assessing the contributing factors, evaluating management’s existing risk mitigation capabilities, identifying risk mitigation enhancement considerations and potential future state activities, and assessing resources needed to implement desired mitigation enhancements.

Each committee of the Board of Directors meets with key management personnel and representatives of outside advisors to oversee risks associated with their respective principal areas of focus both with management present and in separate executive sessions, as described below. We believe this division of responsibilities is an effective approach for addressing the risks we face and that our Board of Directors leadership structure supports this approach. The Audit Committee reviews (i) our major financial risks and enterprise exposures and the steps management has taken to monitor or mitigate such risks and exposures, including our risk assessment and risk management policies, as well as cybersecurity and data privacy risks and risk exposures in other areas, as the Audit Committee deems appropriate from time to time; (ii) our programs for promoting and monitoring compliance with applicable SEC legal and regulatory requirements, as well as major legal regulatory compliance risk exposures and the steps management has taken to monitor or mitigate such exposures; and (iii) the status of any significant legal and regulatory matters and any material reports or inquiries received from regulators or government agencies that reasonably could be expected