Company: BANC-PF
Filing Date: 2025-03-27
Form Type: DEF 14A
Source: 0001169770-25-000015
Chunk: 21

Company: BANC OF CALIFORNIA, INC.
Filing Date: 2025-03-27
Form: DEF 14A
Chunk 21
---
 of the Company’s enterprise risk management framework and associated policies and practices. The Risk Committee is also focused on assisting the Board in its monitoring and oversight of credit processes and asset quality, and compliance with applicable regulatory requirements. In accordance with its charter, the Risk Committee is responsible for ensuring that the Company has in place an appropriate enterprise-wide process to identify, prioritize, measure, monitor and report alignment of the Company's practices with its defined risk appetite, including for example, operational, fraud, third-party relationships involving critical activities and/or risks, technology, information security, anti-money laundering, compliance, model, legal, reputational, strategic, credit, interest rate and liquidity risks, with the

#### 17Banc of CaliforniaAnnual Proxy Statement2025
| Corporate Governance Matters |

management of interest rate and liquidity risks primarily being overseen by the Finance Committee. The Finance Committee assists the Board in its monitoring and oversight of the Company's asset and liability strategies, liquidity, capital planning and management, financial strategies and budgeting and compliance with applicable regulatory and reporting requirements.

During 2024, the Board and each of its committees received reports from executive management and employees who oversee day-to-day risk management duties on the most critical strategic issues and risks facing the Company. In addition, each of these committees and the Board received reports from the Chief Executive Officer, Chief Financial Officer, Chief Risk Officer, Chief Credit Officer, Chief Compliance Officer, Chief Operating Officer, General Counsel, Chief Human Resources Officer, Chief Information Security Officer, Chief Internal Audit Officer, the Company’s independent auditors, third-party advisors, and other executive management regarding compliance with applicable laws and regulations, risk-related policies, procedures and limits in order to evaluate the effectiveness of the Company’s risk controls.

#### Information Security and Data Privacy
The Board maintains oversight of our security program through its Risk Committee, which oversees our information security and technology management program and reviews risks related to information security and cybersecurity as well as the steps taken by management to control for such risks. The Risk Committee oversees and reviews quarterly reports on significant matters of corporate security, including cybersecurity and data privacy. We maintain a formal information security management program under the direction of our Chief Information Security Officer and corporate cyber insurance, which are subject to review and oversight by the Risk Committee and the Board, respectively. For more information, please see Item 1C. Cybersecurity in our Annual Report on Form 10-K for the year ended December 31, 2024 and the Joint Enterprise Risk Committee Charte r, which is publicly available under the