Company: DK
Filing Date: 2025-03-20
Form Type: DEF 14A
Source: 0001140361-25-009658
Chunk: 20

Company: Delek US Holdings, Inc.
Filing Date: 2025-03-20
Form: DEF 14A
Chunk 20
---
 reports to the Board on its discussions and oversight.                                                                                                                                                          |

| DELEK US HOLDINGS, INC. |     | 2025 PROXY STATEMENT | 16 |

TABLE OF CONTENTS

| Technology     
 Committee      |     | •Assists the Board in monitoring the risks associated with the Company’s technological developments, digitalization, and information security.                                                                                                                        
 •Reviews regulations and key legislative and regulatory developments that could materially impact the Company’s information security risk exposure and evaluate the Company’s information technology systems, processes, policies, and controls to ensure compliance. 
 •Regularly reports to the Board on its discussions and oversight.                                                                                                                                                                                                     |
| The Full Board |     | •Oversees the enterprise risk management (“ERM”) program and cyber risk management, including both operational and information security risks resulting from operating critical infrastructure and retail operations.                                                 
 •Discusses findings of the ERM program, including cyber and ESG risks, and reviews the Company’s procedures related to the ERM program and risk management.                                                                                                           
 •Receives regular updates on these matters from the Chief Financial Officer, Chief Information and Data Officer, Chief Information Security Officer and other senior management team members.                                                                         
 •Review and assess industry risk through trade organizations and government agencies.                                                                                                                                                                                 |

Board Oversight of Cyber Risk Cyber risks are monitored through our ERM program, which is overseen by the Board with our Chief Technology and Data Officer having overall responsibility for financial, information technology, and cybersecurity. In overseeing cyber risk, the Board follows the principles identified by the National Association of Corporate Directors in the oversight of cybersecurity risks. At each regular meeting of the Board, cybersecurity risks and Company programs are discussed with the Chief Technology and Data Officer and others. Third parties are periodically engaged in the assessment of cybersecurity, including evaluating maturity under the National Institute for Security and Technology’s cybersecurity framework, testing informational and operational cyber defenses, and reviews of policies and procedures. As discussed above, in 2021 the Board established the standing Technology Committee. One of the Technology Committee’s responsibilities is to review, assess, manage, and mitigate risks related to technological developments, digitalization and information security. The Technology Committee also reviews assessments of the effectiveness of the Company’s information security and technology programs, procedures and initiatives. The Technology Committee regularly receives reports from management regarding information security and cyber risk matters, including the Company’s contingency planning and information security training and compliance. The Technology Committee’s designated focus on these areas of the Company’s digitalization, information security and technology policies help ensure