Company: LEN
Filing Date: 2025-02-28
Form Type: DEF 14A
Source: 0001193125-25-040938
Chunk: 20

Company: LENNAR CORP /NEW/
Filing Date: 2025-02-28
Form: DEF 14A
Chunk 20
---
 downward when warranted. This allows us the flexibility to change the annual incentive compensation in order to remain competitive in the market, address economic conditions and ensure a proper link between pay and performance. |

| • |     | We have a compensation clawback policy that may be triggered in the event of a restatement of financial results, consistent with the requirements under the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, Section 10D of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), and any applicable rules or standards adopted by the SEC (including Rule10D-1under the Exchange Act) (“Rule10D-1”)and the NYSE. |

| • |     | Our stock ownership guidelines require executive officers to hold a meaningful amount of Lennar stock, which mitigates the risk of excessive focus on short-term returns and aligns the interests of those executives with the interests of stockholders. |

Cybersecurity Risks Cybersecurity is an integral part of risk management at our Company. We have installed and continually upgrade an array of protections against cyber-intrusions. Our cybersecurity risk management processes are based upon the National Institute of Standards and Technology (NIST) Cybersecurity Framework, as well as various other regulatory requirements and industry-specific standards. We implement risk-based controls to protect our information, the information of our customers, suppliers, and other third parties, our information systems, our business operations, and our products and related services. These controls include multifactor authentication on all critical systems, firewalls, encryption, anti-virus protections, intrusion detection and prevention systems and identity management systems. We provide mandatory cybersecurity awareness training of threats to associates at least annually and routinely deploy simulated phishing tests to increase security awareness. Our cybersecurity risk management processes also extend to the oversight and identification of threats associated with our use of third-party service providers, including through due diligence of such providers’ cybersecurity practices, contractual obligations to operate their information technology systems in accordance with certain cybersecurity standards and ongoing monitoring. LENNAR CORPORATION2025 PROXY STATEMENT | 19

Corporate Governance Corporate Governance Documents Our Chief Technology Officer (“CTO”) is responsible for assessing and managing our material risks from cybersecurity threats. We have also established a cross-functional Cyber Steering Committee, which includes our CTO, Chief Information Security Officer (“CISO”), General Counsel, certain business leaders on a rotating basis and representatives of human resources and communications. The CISO, supported by inputs from the CTO team leads, delivers quarterly updates to our Audit