Company: MCHB
Filing Date: 2025-04-15
Form Type: DEF 14A
Source: 0001518715-25-000066
Chunk: 35

Company: Mechanics Bancorp
Filing Date: 2025-04-15
Form: DEF 14A
Chunk 35
---
, including cybersecurity and information security risks, as well as reviewing management’s adherence to the Company’s established risk management policies and benchmarks. The Committee will coordinate, as deemed appropriate, with various Board committees to discuss areas of common interest and significant matters regarding the Company’s processes for risk assessment, risk management, and actions taken by management to monitor, control, and remediate risk exposures. As with other committees of the Company, the ERM Committee is authorized to hire such independent experts as the committee may deem necessary or appropriate.

Our Board has adopted a written charter for the ERM Committee. A copy of this charter can be found on our investor relations website: http://ir.homestreet.com. Among other things, this charter requires the ERM Committee to:

• Establishing and maintaining the enterprise-wide risk management framework and promoting the risk management culture within the Company and its subsidiaries;

• define, in conjunction with the Board and management, the Company’s risk appetite and tolerances for risk for the Company;

• annually review and approve the Company’s enterprise risk assessments as a component of the Company’s strategic plan, including the capital plan; and

• monitor the Company’s risk profile and ongoing and potential exposure to material risks of various types, including a review of the Company’s overall capital adequacy and capacity within the context of the approved risk limits and actual results.

In addition, the ERM Committee oversees AML/CFT (BSA), Compliance, Corporate Security, Enterprise Risk Management, Information Security, Information Technology, Model Risk Management, and Quality Control

practices, including:

• reviewing regulatory examinations and reports;

• monitoring the implementation of any corrective measures;

<div align='center'>26</div>

• reviewing and approving the Company’s risk-related policies, including but not limited to the AML/CFT (BSA) Policy, Compliance Management System Policy, Fair Lending Policy, Community Reinvestment Act Policy, Enterprise Risk Management Policy, Corporate Security Policy, Model Risk Management Policy, and Quality Control Policy, and other compliance policies as deemed necessary;

• reviewing and approving the Company’s risk-related management reports;

• reviewing the performance, compensation and independence of the Chief Risk Officer annually;

• approving the initial appointment of the AML/CFT (BSA) Officer, Chief Compliance Officer, Fair Lending Officer, CRA & HMDA Officer, Corporate Security Officer, and Corporate Information Security Officer; then, ratify/affirm such appointment annually; and

• monitor the implementation of changes in significant regulation and the impact upon significant risk(s)