Company: CVLT
Filing Date: 2025-06-25
Form Type: DEF 14A
Source: 0001169561-25-000059
Chunk: 11

Company: COMMVAULT SYSTEMS INC
Filing Date: 2025-06-25
Form: DEF 14A
Chunk 11
---
 reporting directly to the Board from the CSO. Commvault’s management, including the CEO, CFO, Chief Trust Officer, CSO, CIO, and Senior Vice President of Engineering, is responsible for our cybersecurity risk management strategy, operational decision-making, and incident preparedness and response. The current CSO holds a Bachelor of Science and Master of Business Administration from the University of Maryland, industry certifications such as CISSP, PMP, CIPP/E, CIPP/US and CISA, is affiliated with various industry working groups focused on threat intelligence and privacy, and has over twenty years of experience in cybersecurity leading technical, operational, and strategic programs to protect critical data and infrastructure. Management ensures cybersecurity risks are communicated through the establishment of the ERMC and regular, or as needed, reporting to the Audit Committee and the Board. The ERMC is responsible for the implementation, maintenance, and execution of our enterprise risk management program. The ERMC meets quarterly, or as needed, to assess, consider, and manage material risks, including cybersecurity threats across the business. Our ESC is responsible for the significant operational decisions in the event of an active cybersecurity incident. The ESC meets monthly, or as needed, with the Audit Committee Chair as an optional attendee, to provide counsel and foster productive communication between management and the Board.

#### Board Leadership Structure
Our policy is to adopt the leadership structure that best serves Commvault’s needs at any particular time. Currently, our Board has determined that the most effective leadership structure is to have an independent Chair so our President and CEO can focus on his executive leadership role. Mr. Adamo has served as Chair of the Board since 2019. In this capacity, Mr. Adamo is responsible for presiding at Board meetings and executive sessions, and facilitating communication between Board members and the CEO and other members of senior management. As a member of our Board, Mr. Mirchandani ensures that Board members have a high level of access and visibility regarding Commvault’s business, including Mr. Mirchandani’s insights and perspectives on our operations, strategy, and future performance.

#### 17COMMVAULT SYSTEMS, INC. |2025 PROXY STATEMENT
Table of Contents

| CORPORATE GOVERNANCE  |BOARD OVERSIGHT OF RISK |

#### Board Oversight of Risk
The Board oversees Commvault’s policies and procedures relating to enterprise risk. This involves understanding the risks the Company faces and the steps management is taking to manage those risks, and also considering what level of risk is appropriate