Company: SOJE
Filing Date: 2025-03-31
Form Type: PRE 14A
Source: 0000092122-25-000032
Chunk: 30

Company: SOUTHERN CO
Filing Date: 2025-03-31
Form: PRE 14A
Chunk 30
---
 Board and its Committees provide oversight of the Company’s business strategy throughout the year. Various elements of strategy are discussed at every Board meeting, as well as at many meetings of the Board’s committees, and the Board receives regular updates on progress and execution from, and provides guidance to, our management team.

The Board dedicates at least one meeting each year to a deep dive on strategic planning and oversight. These sessions create a dedicated forum for a fluid exchange of viewpoints and ideas on the Company’s strategic direction and identifying new opportunities and risks as management executes upon the Company’s strategy.

| In 2024, the Board participated in a multi-day, expanded off-site strategy session that included presentations by external experts and internal leaders and robust dialogue among the members of the Board. Key topics addressed by external experts included the evolving nature of the utility industry, the growth of data centers and infrastructure and related risks and opportunities for the industry, the dynamic political and regulatory landscape and potential long-term impacts on our business and how intentional inclusion facilitates a corporate growth strategy. Key topics led by senior management across the Company included our long-term financial plan, affordability for our customers, the future of nuclear development, projected customer growth and fleet transition. |

The Board and its committees have both general and specific risk oversight responsibilities. The Board has broad responsibility to provide oversight of significant risks primarily through direct engagement with management and through delegation of ongoing risk oversight responsibilities to the committees. Any risk oversight that is not allocated to a committee remains with the Board.

At least annually, the Board reviews our risk profile to evaluate and confirm that oversight of each risk is properly designated to an appropriate committee or the full Board. The charters of the committees and the checklist of agenda items for each committee define the areas of risk for which each committee is responsible for providing ongoing oversight.

#### Southern Company2025 Proxy Statement31

#### Governance
| Audit          
 Committee      |     | 4Reviews risks and associated risk management activities related to financial reporting and ethics and compliance-related matters.                                                                                                                                                                                                                                                                                        
 4Reviews the adequacy of the risk oversight process and documentation that appropriate enterprise risk management and oversight are occurring. The documentation includes a report that tracks which significant risk reviews have occurred and the committee(s) reviewing such risks. In addition, an overview is provided at least annually of the risk assessment and profile process conducted by Company management. 
 4Receives regular updates from Internal Auditing and quarterly updates as part of the disclosure controls process.                                                                                                                                                                                                                                                                                                        |
| Business       
 Security and   
 Resiliency     
 Committee