Company: GTY
Filing Date: 2025-03-13
Form Type: DEF 14A
Source: 0001140361-25-008521
Chunk: 13

Company: GETTY REALTY CORP /MD/
Filing Date: 2025-03-13
Form: DEF 14A
Chunk 13
---
, backgrounds, and experiences enhances the effectiveness of our Board of Directors, which is affirmed by our Corporate Governance Guidelines. Excluding our Chief Executive Officer who sits on our Board, all of our current Directors, including our Chairman, are independent (as defined in the listing standards of the NYSE) and all of our committees are comprised solely of independent Directors. In evaluating director candidates, our Board considers various factors that contribute to a highly-qualified, well-rounded and effective board of directors, including a wide range of experience, thought, industry expertise, and professional background. Consistent with the criteria set forth in the Nominating & Corporate Governance Committee Charter, our Board remains committed to identifying and prioritizing candidates who bring valuable insights, independent judgment, and a breadth of perspectives to support the Company’s strategic direction and governance. Cybersecurity and Generative AI Oversight We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. We design and assess our program based on industry standards to align closely with information security frameworks and guidelines. This does not imply that we meet or are in compliance with any particular technical standards, specifications, or requirements, but that we use the frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas. Our cybersecurity risk management program also includes a comprehensive cybersecurity incident response plan. This plan was developed with support from the Audit Committee and in consultation with key stakeholders across the Company to ensure it accurately reflects their respective roles and responsibilities. The plan has been selectively disseminated throughout the organization to ensure appropriate coverage and to foster a cohesive and informed response to cybersecurity incidents.

| GETTY REALTY2025 Proxy Statement |     | 17 |

TABLE OF CONTENTS We utilize a commercially available third-party hosted cloud network environment with commercially available systems, software, tools and monitoring to provide security to protect its information and data and alert it to potential information security breaches. The third party engaged by us to oversee and host its network was engaged, in part, because of its experience with information security and data protection and products designed to manage against information and data security breaches. We conduct mandatory annual cybersecurity training for employees and have information security and data privacy policies and procedures in place applicable to our directors, officers, and employees. We