Company: CGABL
Filing Date: 2025-04-17
Form Type: DEF 14A
Source: 0001527166-25-000032
Chunk: 22

Company: Carlyle Group Inc.
Filing Date: 2025-04-17
Form: DEF 14A
Chunk 22
---
itors the adequacy of ourcapital and liquidity positions.•Oversees risks relating totechnology and informationsecurity, including cybersecurity.                                                                                                                                                                                                                                                                  |     | •Oversees risks relating toour compensation programsand strategies for attracting,motivating and retainingemployees, and aligningtheir interests with thoseof our business andour shareholders. |     | •Oversees risk relating to theeffectiveness of our Board,the quality of leadership, andsuccession planning.•Oversees our approach tosustainability strategy. |
| LEADERSHIP TEAM                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |     |                                                                                                                                                                                                 |     |                                                                                                                                                              |
| •With the guidance and oversight of the Board and its committees, management of day-to-day judgments on riskmatters throughout the business has been delegated to the leadership team.                                                                                                                                                                                                                                                                                                  |     |                                                                                                                                                                                                 |     |                                                                                                                                                              |

Oversight of Cybersecurity Global Technology & Solutions, which we refer to as GTS, is essential for Carlyle to conduct investment activities, manage internal administration activities, and connect our global enterprise. As part of our GTS strategy and governance processes, we develop and routinely refine our technology architecture and solutions to deliver value to our investors. Our systems, data, network, and infrastructure are monitored and administered by formal controls and risk management processes that help protect the data and privacy of our employees, investors, and other stakeholders. In addition, our business continuity plans are designed to allow critical business functions to continue in an orderly manner in the event of a system outage. Our GTS team works closely with our business segment teams to maintain operational resilience through business continuity planning and annual IT disaster recovery and incident response plan testing, which collectively support the goal of mitigating risk were an emergency to occur.

| 20 | CARLYLE | Proxy Statement2025 |

| Corporate Governance |

Our Board oversees our enterprise risk management strategy, including our strategy on cybersecurity risks, directly and through its committees. In this respect, the Audit Committee oversees our risk management program, which focuses on the most significant risks we face in the short-, intermediate-, and long-term timeframe. Our Information Security Committee (“ISC”), which is chaired by our Chief Information Security Officer and composed of senior representatives from our business, compliance, and risk management departments, monitors threats and prioritizes the initiatives of our information security program. In addition, we seek to educate our employees on how to safeguard Carlyle’s information assets through security awareness training focused on cyber risks, as well as simulated phishing exercises that provide insight into the effectiveness of our security training.