Company: TROW
Filing Date: 2025-03-26
Form Type: DEF 14A
Source: 0001104659-25-028002
Chunk: 22

Company: PRICE T ROWE GROUP INC
Filing Date: 2025-03-26
Form: DEF 14A
Chunk 22
---
 reviews, and approves business activities of the Company, while maintaining the Company's risk tolerance, as set by the Board. The Company's Enterprise Risk Management Committee, composed of senior members of management including our chief risk officer, oversees the Company's risk management strategy on behalf of the Management Committee. The Enterprise Risk Management Committee develops and maintains the Company's risk management policies and procedures and regularly monitors the significant risks inherent to the business, including operational risk, strategic risk, investment performance risk, legal and compliance risk, technology and cyber risk, environmental and social risk, human capital risk, and financial risk. Cybersecurity Oversight Technology is a key component of our business operations, and cybersecurity is a significant consideration for the Company. T. Rowe Price has a holistic company wide approach to risk management, including material risks from cybersecurity threats. The Company's overall risk management activities are designed to identify, assess, report, and manage risks that could affect the Company in achieving its objectives and goals. This risk management framework operates across our business lines and integrates business operational resiliency and technology-related risks, such as cybersecurity threats. Although management is responsible for the Company's day-to-day cybersecurity operations, the Board oversees the Company's cybersecurity program. The Board does not delegate this responsibility to a committee, nor does the Board identify a cybersecurity expert to consider the Company's activities and make recommendations or provide advice to the Board. Instead, many of our directors have significant technology experience gained through their prior work experience and through their positions on other boards of directors, all of which provides the Board with insight and practical guidance in overseeing the Company's technology and operations as well as our continuing investment in and development of our cybersecurity program. At each quarterly meeting, the Audit Committee receives an update concerning the Company's cybersecurity metrics. In addition, at least annually, the Board receives a technology and cybersecurity update from the Company's senior technology and information security leaders. The Board receives information concerning the Company's preparation for a cyber incident in order to understand how it would respond to a specific cybersecurity threat, along with the impact to its operations. As part of this process, the Board engages in various activities to stay abreast of the cyber landscape, including briefings led by third-party and management experts and discussions related to publicized cyber events in our industry and other industries. Our global information security team, in collaboration with our risk and internal audit teams and independent third parties, assesses cyber risks and adjusts our program as needed and reports the results of the same to the Board.

| 34 | T. Rowe Price Group