Company: PBH
Filing Date: 2025-06-27
Form Type: DEF 14A
Source: 0001295947-25-000021
Chunk: 22

Company: Prestige Consumer Healthcare Inc.
Filing Date: 2025-06-27
Form: DEF 14A
Chunk 22
---
 strategy, including reviewing riskassessments from management with respect to our information technology systems and procedures, and overseeingour cybersecurity risk management strategy. The Audit and Finance Committee, which is tasked with oversight ofcertain risk issues, including cybersecurity, receives regular reports from the Chief Financial Officer and the VicePresident, Information Technology and Chief Information Security Officer (“CISO”). At least annually, the Audit andFinance Committee receives updates on the strategy and about the results of exercises and response readinessassessments led by outside advisors who provide a third-party independent assessment of our technical program andour internal response preparedness. The Audit and Finance Committee also receives periodic briefings regarding ourinformation security programs and cyber threats in order to enhance our directors’ literacy on cyber issues. In addition,management will update the Audit and Finance Committee, as necessary, regarding cybersecurity incidents that wemay experience. Our CISO and Chief Financial Officer are responsible for assessing and managing our material risksfrom cybersecurity threats. The cyber security risk management team, which includes personnel with CertifiedInformation Systems Security Professional ("CISSP") certification from ISC2, has primary responsibility for our overallcybersecurity risk management program and oversees both our internal cybersecurity personnel and our retainedexternal cybersecurity consultants. Our cyber security risk management team is led by our CISO, who has significantexperience across digital innovation and technology-enabled growth, information security, infrastructure, operations andcompliance. Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risksand incidents through various means, which include briefings from internal personnel; threat intelligence and otherinformation obtained from governmental, public or private sources, including external consultants engaged by us; andalerts and reports produced by security tools deployed in the IT environment. |

| 32 |     | 2025 Proxy Statement | Prestige Consumer Healthcare Inc. |

Our Governance

Oversight of Corporate Responsibility Our Board considers corporate responsibility to be important for the long term success of the Company and has delegated oversight of those programs to the Nominating and Corporate Governance Committee. Our Senior Vice President and General Counsel and our Vice President, Investor Relations and Treasury lead our corporate responsibility initiatives supported by various functional representatives and external subject matter experts. They meet regularly with functional experts to review the health of the program, opportunities for improvement, and the status of execution against agreed program priorities. Our Senior Vice President and General Counsel and Vice President, Investor Relations and Treasury also meet regularly with the Nominating and Corporate Governance Committee to review our corporate responsibility priorities.

|                                                                                                                                                                                                                                            |     | Board