Company: PRGO
Filing Date: 2025-03-10
Form Type: PRE 14A
Source: 0000950170-25-035751
Chunk: 18

Company: PERRIGO Co plc
Filing Date: 2025-03-10
Form: PRE 14A
Chunk 18
---
 Jonas Samuelson.

The NGC identifies and recommends to the Board qualified director nominees. This committee also develops and recommends to the Board the Corporate Governance Guidelines applicable to Perrigo, leads the Board in its annual review of Board performance and makes recommendations to the Board with respect to the assignment of individual directors to various committees as well as Board succession planning.

Board Oversight of Global Cybersecurity and Information Security Risk

The NGC meets separately in advance of each regular Board meeting and when needed in the event of a specific cyber threat. The Chair of the NGC regularly reports out to the Board on key matters considered by the Committee.

Cybersecurity is an important part of our risk management program and an area of increasing focus for our Board and management. We use a risk-based approach to identify, assess, protect, detect, respond to and recover from cybersecurity threats. The Company’s cybersecurity policies, standards and processes are designed and implemented in light of the requirements of the National Institute of Standards and Technology ("NIST") frameworks for cybersecurity and privacy.

Recognizing that no single technology, process or business control can effectively prevent or mitigate all risks, we employ multiple technologies, processes and controls, all working as part of a cohesive strategy to minimize risk including the following:

We emphasize security and resiliency through business assurance capabilities and incident response plans designed to identify, evaluate and remediate incidents when they occur. We regularly review and update our plans, policies and technologies and conduct regular training exercises and crisis management preparedness activities to test their effectiveness.

Perrigo leverages the NIST cybersecurity framework to measure the capability of its cybersecurity program and we conduct third party assessments to measure the NIST ratings.

We maintain a cybersecurity risk register which is reviewed periodically with relevant stakeholders. Risks that are higher in impact are included within our Enterprise Risk Register which is reviewed with ELT and Perrigo Board of Directors.

Our process used to identify, assess, protect, detect, respond to and recover from cybersecurity threats is regularly tested by external parties through penetration testing, and other exercises designed to assess and test our cybersecurity health, resiliency and the effectiveness of our program.

#### PERRIGO•2025 PROXY STATEMENT13
Board of Directors and Committees

Management invests in organization capability and technology to manage and identify cybersecurity and information security risks. Our Company has information security employees across the globe, enabling us to monitor and promptly respond to threats and incidents, identify and maintain oversight of cybersecurity risks associated with third parties, evaluate and deploy cybersecurity technologies and educate associates on cybersecurity risks.

We