Company: FCFS
Filing Date: 2025-04-25
Form Type: DEF 14A
Source: 0000840489-25-000055
Chunk: 18

Company: FirstCash Holdings, Inc.
Filing Date: 2025-04-25
Form: DEF 14A
Chunk 18
---
 Wessel, all of its directors, including all of the members of the Audit, Compensation, and Nominating and Corporate Governance Committees, are “independent” as defined by Nasdaq, the SEC and the Company’s Corporate Governance Guidelines. No director is deemed independent unless the Board of Directors affirmatively determines the director has no material relationship with the Company. In making its determination, the Board of Directors observes all criteria for independence established by the rules of the SEC and Nasdaq.

<div align='center'>8</div>

#### Oversight of Risk Management
The Board of Directors is responsible for overseeing and monitoring the material risks facing the Company. In its oversight role, the Board of Directors regularly reviews the Company’s strategic initiatives, which address, among other things, the risks and opportunities facing the Company. The Board of Directors also has overall responsibility for executive officer succession planning and reviews succession plans from time to time. The Board of Directors has delegated certain risk management oversight responsibility to its committees, and primarily the Audit Committee.

As part of its responsibilities, the Audit Committee is responsible for discussing with management the Company’s major risk exposures, including financial risks and cybersecurity, and the steps management has taken to monitor and control those exposures, including the Company’s risk assessment and risk management policies. The Audit Committee also monitors the Company’s compliance with legal and regulatory requirements and the risks associated therewith. On a regular basis, the Audit Committee reviews with senior management significant areas of risk exposure, including financial reporting controls, operational risks, pending litigation, employee issues, cybersecurity, disaster recovery planning, and issues arising from complaints to the Company’s hotline and other risk detection mechanisms.

#### Cyber and Technology Risk
Given the Company’s status as a pawn store operator and payment solutions company entrusted with the safeguarding of sensitive customer information, the Board of Directors believes that a strong enterprise cybersecurity program is vital to the Company’s overall enterprise risk management. The Board of Directors is responsible for overseeing and monitoring the material risks facing the Company. The Board of Directors has tasked the Audit Committee with leading the Company’s cyber and technology risk mitigation efforts. As part of its oversight responsibilities, the Audit Committee is responsible for discussing with management the Company’s major risk exposures, related to cybersecurity and technology, and the steps management has taken to monitor and control those exposures, including the Company’s risk assessment and risk management policies. The Audit Committee also monitors the Company’s compliance with legal and regulatory requirements and the risks associated therewith. On a regular basis, the Audit Committee reviews with senior management significant areas of risk exposure