Company: CDLX
Filing Date: 2025-04-03
Form Type: DEF 14A
Source: 0001666071-25-000046
Chunk: 14

Company: Cardlytics, Inc.
Filing Date: 2025-04-03
Form: DEF 14A
Chunk 14
---
 consultation with senior management, the agenda for regular and special Board of Directors meetings; establish the agenda for the meetings of the independent directors; and, as appropriate or upon request, act as a liaison to stockholders. As a result, we believe that the Board Chair helps ensure the effective independent functioning of the Board of Directors in its oversight responsibilities.

#### Role of the Board of Directors in Risk Oversight
One of the Board of Directors' key functions is informed oversight of the Company's risk management process. The Board of Directors does not have a standing risk management committee, but rather administers this oversight function directly through the Board of Directors as a whole with the assistance of the Audit Committee, as well as through various standing committees that address risks inherent in their respective areas of oversight, including operational, financial, cybersecurity, legal, regulatory, strategic and reputational risks. Our Board of Directors is responsible for monitoring and assessing our strategic risk exposure, including a determining the nature and level of risk appropriate for the Company. Our Audit Committee has the responsibility to consider and discuss our major financial risk exposures and the steps our management has taken to monitor and control these exposures, including by issuing guidelines and policies to govern the process by which risk assessment and management is undertaken. The Audit Committee also monitors compliance with legal and regulatory requirements and oversees the performance of our internal audit function. Our Nominating and Corporate Governance Committee monitors the effectiveness of our corporate governance guidelines, including whether they are successful in preventing illegal or improper liability-creating conduct. Our Compensation Committee assesses and monitors whether any of our compensation programs, policies or practices has the potential to encourage excessive risk-taking. Our committee chairs are responsible for reporting material risk exposures to the Board of Directors as quickly as possible. The Board of Directors has delegated to the Board Chair the responsibility of coordinating between the Board of Directors and management regarding determining and responding to any problematic risk management issues.

#### Internal Audit and External Party Assessments
Cardlytics management periodically reviews and updates our risk and controls matrix. The risk and compliance team periodically meets with control owners to discuss any changes to procedures and processes and determine if the controls in place sufficiently cover related risks.

The internal audit team performs an assessment of internal control performance on a periodic basis to identify deficiencies in internal controls. Additionally, external parties are engaged to perform periodic assessments of internal controls.

Senior management and the Audit Committee review the results of the internal audit team's and external party's periodic assessments of internal control performance to determine corrective action, as appropriate.

#### Risk Assessment Process
We maintain a risk assessment