Company: ASAN
Filing Date: 2025-04-30
Form Type: DEF 14A
Source: 0001477720-25-000081
Chunk: 23

Company: Asana, Inc.
Filing Date: 2025-04-30
Form: DEF 14A
Chunk 23
---
 team at quarterly meetings of our Board of Directors and at such other times as they deem appropriate, where, among other topics, they discuss risks facing the Company and risk management strategy.

While our Board of Directors is ultimately responsible for risk oversight, our Board committees assist our Board of Directors in fulfilling certain risk oversight responsibilities. Our Audit Committee assists our Board of Directors in fulfilling its oversight responsibilities with respect to risk management in the areas of internal control over financial reporting and disclosure controls and procedures as well as financial, accounting, investment and tax risk, including anti-fraud measures, and cybersecurity and information technology risk. Our Audit Committee discusses with management and the independent auditor guidelines and policies with respect to risk assessment and risk management. Our Audit Committee also reviews our major financial risk exposures and the steps management has taken to monitor and control these exposures. Our Audit Committee also monitors certain key risks on a regular basis throughout the fiscal year, such as risks associated with

internal control over financial reporting and liquidity risks. Our Nominating and Corporate Governance Committee assists our Board of Directors in fulfilling its risk oversight responsibilities with respect to the management of risks associated with board organization, membership and structure, and corporate governance. Our Compensation Committee assesses risks created by the incentives inherent in our compensation policies.

In connection with its reviews of the operations of our business, our Audit Committee and our Board of Directors oversee and evaluate the primary risks associated with our business including, for example, strategic planning and cybersecurity. Our Board of Directors appreciates the evolving nature of our business and industry and is actively involved with monitoring new threats and risks as they emerge.

At periodic meetings of our Board of Directors and its committees, management reports to and seeks guidance from our Board and its committees with respect to the most significant risks that could affect our business, such as legal risks, cybersecurity matters, risks related to ESG Matters, information security and privacy risks, and financial, tax, and compliance related risks. In addition, among other matters, management provides our Audit Committee periodic reports on our compliance programs and investment policy and practices.

Insider Trading Policy and Prohibition on Hedging, Short Sales, and Pledging

Our insider tradingpolicy, which applies to all of our directors, officers, employees, and agents (such as consultants and contractors), is reasonably designed to promote compliance with insider trading laws, rules and regulations, and any applicable NYSE listing standards, and expressly prohibits them from purchasing or selling our securities while in possession of material, non-public information, or otherwise using such information for their personal benefit.

The policy