Company: MMI
Filing Date: 2025-03-19
Form Type: DEF 14A
Source: 0001193125-25-057887
Chunk: 24

Company: Marcus & Millichap, Inc.
Filing Date: 2025-03-19
Form: DEF 14A
Chunk 24
---
 the Audit, Compensation, and Nominating and Corporate Governance Committees being responsible for monitoring and reporting on the material risks associated with their respective subject matter areas.

| The Board                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |     |                                                                                                              |     |                                                                                                                                                                                                                                                                                             |
| The Board’s role in our risk oversight process includes receiving regular reports from members of senior management, as well as external advisors, on areas of material risk to us, including operational, economic, financial, legal, regulatory, cybersecurity, and competitive risks. The full Board (or the appropriate committee in the case of risks that are reviewed by a particular committee) receives these reports from those responsible for the relevant risk to better understand our risk exposures and the steps that management may take to monitor and control these exposures. When a committee receives the report, the chair of the relevant committee generally will provide a summary to the full Board at the next Board meeting, allowing the Board and its committees to coordinate the risk oversight role. |     |                                                                                                              |     |                                                                                                                                                                                                                                                                                             |
| Committee Responsibilities                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |     |                                                                                                              |     |                                                                                                                                                                                                                                                                                             |
| Audit Committee                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |     | Compensation Committee                                                                                       |     | Nominating and Corporate Governance Committee                                                                                                                                                                                                                                               |
| The Audit Committee assists the Board in oversight and monitoring of principal risk exposures related to financial statements, legal, regulatory, cybersecurity, and other matters, as well as related mitigation efforts and receives regular reports on such matters from the Company’s Chief Information Officer and Chief Compliance Officer.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |     | The Compensation Committee assesses, at least annually, the risks associated with our compensation policies. |     | The Nominating and Corporate Governance Committee assists the Board in oversight of risks that we have relative to compliance with corporate governance standards.   This includes oversight of risks related to social issues, diversity, environmental sustainability, and public policy. |

Marcus & Millichap, Inc. | 2025 Proxy Statement | Page 26

Corporate Governance Cybersecurity and Risk Oversight Cybersecurity is an important part of our risk management processes and an area of increasing focus for our Board and management. The Role of the Board The Audit Committee of our Board, which is comprised entirely of independent Directors, is responsible for the oversight of risks from cybersecurity threats and other risks relevant to the Company’s information technology controls and security. At least quarterly, the Audit Committee receives an overview from management of our cybersecurity threat risk management and strategy processes covering topics such as data security