Company: BCML
Filing Date: 2025-04-25
Form Type: DEF 14A
Source: 0001730984-25-000031
Chunk: 21

Company: BayCom Corp
Filing Date: 2025-04-25
Form: DEF 14A
Chunk 21
---
 our leadership structure, with our President and Chief Executive Officer and the other members of senior management having responsibility for assessing and managing risk exposure and with our Board of Directors and its committees providing oversight in connection with those efforts. We believe this division of risk management responsibilities presents a consistent, systematic and effective approach for identifying, managing and mitigating risks throughout our operations.

Board’s Role in Oversight of Information and Cybersecurity.As a financial institution, cybersecurity presents a significant operational and reputational risk. Given the nature of our operations and business, including the Bank’s reliance on relationships with various third-party providers in the delivery of financial services, cybersecurity risk may manifest itself through various business activities and channels, and it is thus considered an enterprise-wide risk that is subject to control and monitoring at various levels of management throughout the Bank and oversight by the Board. The

<div align='center'>12</div>

Board receives updates on the status of our cybersecurity controls, reports of significant cybersecurity incidents and annual education in this area.

We maintain a formal information/cybersecurity management program designed to protect the confidentiality, integrity, and availability of business and customer information, which is subject to oversight by and reporting to the Audit Committee. The Audit Committee oversees and reviews reports on significant matters of corporate security, including cybersecurity. Reports include information and cybersecurity assessment results, business continuity, disaster recovery, and incident response planning and testing, patch management program status, vendor management program status, and independent audit results. All information security-related policies are reviewed and approved annually by the Audit Committee.

Insider Trading Policy. governing the purchase, sale, and other dispositions of BayCom’s securities that applies to all Company personnel, including directors, officers, employees, and other covered persons. The Company follows this policy when repurchasing stock. We believe our insider trading policy and repurchase procedures are reasonably designed to promote compliance with insider trading laws, rules and regulations, and listing standards applicable to BayCom. A copy of BayCom’s insider trading policy was filed as Exhibit 19.1 to its Annual Report on Form 10-K for the year ended December 31, 2024.

Additionally, BayCom’s insider trading policy, among other things, prohibits the Company’s directors, officers and employees from holding Company securities in a margin account or pledging Company stock as collateral for a loan. In addition, the policy prohibits directors, officers and employees of the Company from using any financial instruments (including without limitation prepaid variable forward contracts, equity swaps, collars, and exchange funds) or otherwise engaging in