Company: FTCI
Filing Date: 2025-04-30
Form Type: DEF 14A
Source: 0000950170-25-061051
Chunk: 9

Company: FTC Solar, Inc.
Filing Date: 2025-04-30
Form: DEF 14A
Chunk 9
---
 are impacted by climate change and additional demographic information regarding our executive leadership team and our employee base. In addition, our Board of Directors has adopted Corporate Governance Guidelines outlining the Board's roles and responsibilities, leadership structure, composition, compensation and other matters, which is available on our corporate website at https://investor.ftcsolar.com.

Code of Business Conduct and Ethics

We have adopted a written code of business conduct and ethics that applies to all of our officers, directors and employees, including our principal executive officer, principal financial officer, principal accounting officer or controller, or persons performing similar functions, which is posted on our website, https://investor.ftcsolar.com. All employees are required to attend annual training on our code of business conduct and ethics. Our code of business conduct and ethics is a “code of ethics,” as defined in Item 406(b) of Regulation S-K. We will make any legally required disclosures regarding amendments to, or waivers of, provisions of the code on our website.

Cybersecurity

We recognize the importance of developing, implementing and maintaining robust cybersecurity measures to safeguard our information technology ("IT") systems and protect the confidentiality, integrity, and availability of our data.

We have integrated cybersecurity risk management into our overall risk management and internal control framework and have established policies and controls that we believe are appropriate in light of the risks of damage to our reputation and financial condition from unauthorized access to our key digital assets and systems.

We have established a Cybersecurity Governance Committee, which meets monthly or more frequently, if needed, to monitor:

our current cybersecurity controls and our ability to address emerging threats;

the status of our ongoing cybersecurity initiatives and strategy;

incident reports from any cybersecurity events; and

compliance with regulatory requirements and industry standards.

<div align='center'>4</div>

The Cybersecurity Governance Committee has the responsibility for determining if a cybersecurity incident is considered to have a material impact on the Company requiring public reporting in accordance with the rules and regulations of the U.S. Securities and Exchange Commission.

Under the guidance of the Cybersecurity Governance Company, we have adopted (i) a Security Incident Response Plan, (ii) a Cybersecurity Materiality Assessment Policy, and (iii) a Cybersecurity Register of Events.

Our IT management, in conjunction with our Director of Internal Audit, has responsibility for monitoring and testing the effectiveness of our cybersecurity controls and procedures on a recurring basis.

Our Board of Directors is aware of the critical nature of managing risks associated with cybersecurity threats and has established oversight mechanisms to ensure effective governance in managing these risks.