Company: ZVRA
Filing Date: 2025-04-21
Form Type: DEFC14A
Source: 0001193125-25-086293
Chunk: 35

Company: ZEVRA THERAPEUTICS, INC.
Filing Date: 2025-04-21
Form: DEFC14A
Chunk 35
---
 one director identifies as African American or Black.

ROLE OF THE BOARD IN RISK OVERSIGHT

One of the Board’s key functions is informed oversight of our risk management process. The Board does not have a standing risk management committee but rather administers this oversight function directly through the Board as a whole, as well as through various Board standing committees that address risks inherent in their respective areas of oversight. The Board and its committees re-assess the Company’s risk environment on an ongoing basis and consult with outside parties as needed from time to time in addressing both current and anticipated future risks. The Board elects to retain direct oversight responsibility for risks that are most effectively overseen by simultaneously leveraging broader areas of director expertise. Additionally, while the Board and its committees all review risks over the short-, intermediate-, and long-term, the Board more frequently elects to retain direct

<div align='center'>33</div>

oversight over short-term or immediate risks. In particular, our Board is responsible for monitoring and assessing strategic risk exposure, including a determination of the nature and level of risk appropriate for the Company. Our Audit Committee has the responsibility to consider and discuss our major financial risk exposures and the steps our management has taken to monitor and control these exposures, including guidelines and policies to govern the process by which risk assessment and management is undertaken. Additionally, our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program. The Audit Committee also provides oversight and assistance in connection with our legal, regulatory and ethical compliance programs as established by management and the Board. The Nominating and Corporate Governance Committee oversees all aspects of our corporate governance functions and related risks. The compensation committee of the Board (the “Compensation Committee”) assesses and monitors whether any of our compensation policies and programs has the potential to encourage excessive risk-taking.

Management’s involvement in day-to-day risk management enables the Company’s disclosure committee, which consists of members of management, to assist our Chief Executive Officer and Chief Financial Officer in the effective design, establishment, maintenance, review and evaluation of the Company’s disclosure controls and procedures. The Company’s management, led by our Chief Executive Officer and executive team, implements and supervises day-to-day risk management processes. Both the Board as a whole and the various standing committees receive periodic reports from our employees responsible for risk management, as well as incidental reports as matters may arise. It is the responsibility of the committee