Company: PENG
Filing Date: 2025-12-19
Form Type: DEF 14A
Source: 0001616533-25-000073
Chunk: 22

Company: Penguin Solutions, Inc.
Filing Date: 2025-12-19
Form: DEF 14A
Chunk 22
---
 and test facilities, and sales and other offices in many countries, and we market our products to OEMs and commercial and government customers. Directors with global and government experience can provide valuable perspectives and insights regarding many important aspects of our business.

• Public Company Board Experience : Directors with public company board experience understand the dynamics and operation of a corporate board, the relationship of a public company board to the CEO and other senior management personnel, the legal and regulatory landscape in which public companies must operate, the importance of particular agenda and oversight issues, and the oversight of an ever-changing mix of strategic, operational, regulatory, and compliance-related matters.

• Contribution to Board Perspectives : Members representing a range of relevant personal and professional backgrounds can expand the Board’s understanding of the needs and viewpoints of our customers, partners, employees, governments, stockholders, the environment, and other stakeholders worldwide.

• Financial Expertise : Directors with financial literacy, risk management experience, transactional experience (including M&A), and other financial expertise, such as audit management practices, including cybersecurity, can help us navigate compliance with complex and changing financial regulations, transactions, and other ongoing compliance matters.

<div align='center'>18</div>

### Cybersecurity and Technology Risk Management Committee
In June 2021, the Board formed the Cybersecurity Committee, which acts on behalf of the Board to oversee our information technology use, data security, AI governance matters, and compliance with information security and data protection laws. Among other things, the Cybersecurity Committee is responsible for:

• Cybersecurity : Overseeing our global IT strategy, including the quality and effectiveness of our policies and procedures with respect to our IT systems, enterprise cybersecurity, AI, and privacy;

• Data Collection : Overseeing the systems, controls, and procedures used by us and our business partners engaged to collect, create, use, maintain, process, and protect personal information and/or any information or assets of our customers, employees, and business partners (collectively, “Company Information Assets”);

• Data Protection : Overseeing policies, procedures, plans, and execution intended to provide security, confidentiality, availability, and integrity of Company Information Assets;

• AI Governance : Along with management, reviewing the implementation, use, and management of generative AI tools at the Company to ensure that AI initiatives align with the Company's ethical standards, regulatory requirements, and strategic objectives;

• Product Oversight : Providing high-level guidance on the risk of compromise of any of our products, services (including software), and processes and controlling procedures put in place to mitigate such risks