Company: DNLI
Filing Date: 2025-04-17
Form Type: DEF 14A
Source: 0001714899-25-000087
Chunk: 32

Company: Denali Therapeutics Inc.
Filing Date: 2025-04-17
Form: DEF 14A
Chunk 32
---
 and our patients. One of the key functions of our board of directors is informed oversight of our risk management process, including risks from cybersecurity threats. Our board of directors is responsible for monitoring and assessing strategic risk exposure, and our executive officers are responsible for the day-to-day management of the material risks we face. Our board of directors administers its cybersecurity risk oversight function directly as a whole, as well as through the audit committee. Our executive director of IT, who leads Denali’s cybersecurity strategy and IT team, provides quarterly briefings to the audit committee regarding our company’s cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like. Our audit committee provides regular updates to the board of directors on such reports; the executive director of IT may be called upon to brief the board as well. We have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats, including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. As part of our overall risk management system, we conduct annual security awareness training for personnel at all levels and functions, issue periodic simulated social engineering tests, and have established protocols to escalate cybersecurity incidents from identification through remediation. Performance of our cybersecurity controls for certain systems is periodically reviewed by our internal quality functions. We further require third-party service providers who will be handling our company’s sensitive information to certify that they implement appropriate security measures, consistent with all applicable laws, to maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach of its security measures that may affect our company. The Company currently carries cybersecurity insurance for certain security events. Within the last three years, we have not experienced any material information security breaches.

<div align='center'>-23-</div>

#### PROPOSAL NO. 1

### ELECTION OF DIRECTORS
Our board of directors is currently composed of 10 members. In accordance with our certificate of incorporation, our board of directors is divided into three classes with staggered three-year terms. At the Annual Meeting, three Class II directors will be elected for a three-year term to succeed the same class whose term is then expiring.

Each director’s term continues until the election and qualification of such director’s successor, or such director’s earlier