Company: LAWIL
Filing Date: 2025-04-30
Form Type: DEF 14A
Source: 0001104659-25-041831
Chunk: 14

Company: Light & Wonder, Inc.
Filing Date: 2025-04-30
Form: DEF 14A
Chunk 14
---
 current leadership structure is appropriate because it effectively allocates authority, responsibility and oversight between management and the independent members of the Board. Board’s Role in Risk Oversight. The Board is responsible for overseeing management in the execution of its responsibilities and for assessing the Company’s approach to risk management, including ensuring that sufficiently robust risk and compliance policies and procedures are in place and are functioning properly to bring key risk and compliance matters to the Board’s attention. The Board exercises these responsibilities on an ongoing basis as part of its meetings and through the Board’s committees, each of which examines various components of enterprise risk as part of its responsibilities. An overall review of risk is inherent in the Board’s consideration of the Company’s strategies, such as product and market concentration, competition, acquisitions and divestitures and business transformation and other matters presented to the Board, including operational risks, such as information technology, cybersecurity, personnel and supply chain; financial risks, such as financial reporting, valuation, market and liquidity risks, as described below; and environmental, social and governance risks, such as sustainability, social responsibility, diversity, equity and inclusion, management structure and employee compensation. The Board’s role in risk oversight is consistent with the Company’s leadership structure, with the Chief Executive Officer and other members of senior management 9 TABLE OF CONTENTS having responsibility for managing the Company’s risk exposure, and the Board and its committees providing oversight of those efforts. The Company has implemented internal processes and controls to identify and manage risks and to communicate with the Board regarding risk management. These include an enterprise risk management program, regular internal management meetings that identify risks and discuss risk management, a Code of Business Conduct (the “Code”) (and related trainings), a separately established ethics and compliance function that includes suitability reviews of customers, partners, vendors and other persons/entities with which the Company does business, regular cybersecurity, data flow and data privacy assessments, such as evaluation of network security measures and data protection safeguards, an internal and external audit process, that includes testing controls, internal approval and signature authority processes and legal department review of contracts. The Board of Directors is central to oversight of cybersecurity risks. The Board of Directors is composed of members with diverse expertise, including risk management, technology, finance and legal, and they have appropriate access to management and third parties (as deemed necessary), equipping them to oversee cybersecurity risks effectively. Day-to-day cybersecurity monitoring and oversight activities are delegated to management. In connection with the Board’s risk oversight, management regularly communicates with the Board, Board committees and individual directors regarding identified risks