Company: AOMN
Filing Date: 2025-04-02
Form Type: DEF 14A
Source: 0001766478-25-000028
Chunk: 21

Company: Angel Oak Mortgage REIT, Inc.
Filing Date: 2025-04-02
Form: DEF 14A
Chunk 21
---
 meeting, separately from the aforementioned executive sessions consisting of independent directors only. Our Lead Independent Director presides at such non-management director executive sessions.

#### Board of Directors’ Role in Risk Oversight
One of the key functions of the Board is informed oversight of our risk management process. The Board administers this oversight function directly, with support from its four standing committees: our Audit Committee, our Compensation Committee, our Nominating and Corporate Governance Committee and our Affiliated

<div align='center'>12</div>

Transactions and Risk Committee. Each committee addresses risks specific to its respective areas of oversight. In particular, as more fully described below, our Audit Committee has the responsibility to consider and discuss our cybersecurity risk and our major financial risk exposures and the steps our Manager has taken to monitor and control these exposures, including guidelines and policies to govern the process by which risk assessment and management is undertaken. Our Audit Committee also monitors compliance with legal and regulatory requirements, in addition to oversight of the performance of our internal audit function. Our Compensation Committee assesses and monitors whether any of our compensation policies and programs has the potential to encourage excessive risk-taking. Our Nominating and Corporate Governance Committee provides oversight with respect to corporate governance and ethical conduct and monitors the effectiveness of our Corporate Governance Guidelines, including whether our Corporate Governance Guidelines are successful in preventing illegal or improper liability-creating conduct. Our Affiliated Transactions and Risk Committee must approve, among other related party transactions, the pricing of our acquisition of any non-qualified residential mortgage (“ non-QM ”) loans and any other target assets we acquire from Angel Oak Mortgage Lending or other affiliate of our Manager. Additionally, our Affiliated Transactions and Risk Committee assists the Board in its oversight of the Company’s risk governance structure, risk management, and risk assessment guidelines and policies regarding credit, liquidity, and leverage risk.

#### Cybersecurity
Angel Oak has engaged a third-party managed information technology service provider (the “IT Service Provider”), to serve as Angel Oak’s dedicated information technology manager. We rely on our Manager for the implementation and execution of our risk management program, and, as it pertains to the assessment, identification, and management of material risks from cybersecurity threats, our Manager relies on the IT Servicer Provider. As an affiliate of Angel Oak, our Manager is subject to and participates in the cybersecurity policies and procedures of Angel Oak. The IT Service Provider provides Angel Oak a system and organization controls report on itself consistent with SOC 2 ® as part of annual reviews of the IT Service Provider. Members of the IT Service Provider