Company: TJX
Filing Date: 2025-05-01
Form Type: DEF 14A
Source: 0000109198-25-000024
Chunk: 23

Company: TJX COMPANIES INC /DE/
Filing Date: 2025-05-01
Form: DEF 14A
Chunk 23
---
.

### RISK OVERSIGHT STRUCTURE
| THE BOARD                                                                                                                                                                                                             |
| The Board has oversight responsibility for the systems established to report and monitor the most significant risks applicable to TJX. The Board reviews risks including:                                             
 •strategic, financial, and execution risks and exposures associated with our annual business plan and longer-term plansthat may present material risk to our business, operations, financial position, or cash flows; 
 •senior management succession planning; and                                                                                                                                                                           
 •matters that may present material risk to our prospects or reputation, including those related to cybersecurity, human capital management, supply chain, and environmental sustainability.                           |

| BOARD COMMITTEES                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |     |                                                                                                                                                                                                                                                                                                                |     |                                                                                                                                                                                                                                                                                                                                             |
| TheAudit and Finance Committeereviews risks associated with financing plans; investment policies; capital structure, financial reporting, accounting, internal controls over financial reporting; ethics and compliance programs; information systems, information security, data privacy, and cybersecurity; and funding of our pension and retirement benefit plans, and also helps oversee processes to identify material risks, including through our enterprise risk management program. |     | TheCompensation Committeereviews risks associated with the Company’s overall compensation policies and practices, including an annual compensation risk assessment, and assists the Board in its oversight of human capital matters with respect to the compensation and benefits of the Company’s Associates. |     | TheCorporate Governance Committeereviews risks related to Board composition, refreshment, and evaluation; CEO evaluations and management succession; and potential conflicts of interest and related party transactions, and also assists the Board in its oversight of significant environmental and social matters affecting the Company. |

| MANAGEMENT                                                                                                                                                                                                                                                                    |
| •Management is responsible for managing risk and identifying for the Board’s attention risks that are material to TJX. The Board is responsible for giving such risks due consideration and, where appropriate, reviewing and considering or investigating the risks further. 
 •Management responsibilities are coordinated through its compliance, internal audit, and other functions, which report regularly to the Board and Committees through the Chief Risk and Compliance Officer or other management representatives.                               
 •Reporting to the Board in key areas is supported by senior leaders across global functional teams.                                                                                                                                                                           
 •In several key areas, risk assessment and oversight is also supported by cross functional operational committees, including for cybersecurity, environmental sustainability, and social compliance.                                                                          |

| ENTERPRISE RISK MANAGEMENT PROGRAM                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| The enterprise risk management program is a global process for evaluating a