Company: SPR
Filing Date: 2025-04-23
Form Type: DEF 14A
Source: 0001140361-25-015209
Chunk: 12

Company: Spirit AeroSystems Holdings, Inc.
Filing Date: 2025-04-23
Form: DEF 14A
Chunk 12
---
 within committee's purview and reports findings to the Board.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
 •Oversees environmental sustainability report and related efforts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |

16

TABLE OF CONTENTS Management’s Role in Risk Oversight The Company’s management is responsible for the identification, assessment, mitigation, and management of risks relating to the Company’s strategy and operations. Apart from reporting to the Board, management engages in a robust enterprise risk management process that involves: (i) creating risk-assessment surveys and conducting interviews; (ii) reviewing, repositioning, and prioritizing identified risks by a risk council composed of executive leadership; (iii) assigning risks to risk owners based on responsibilities with respect to the Company’s strategic objectives; (iv) developing and reporting mitigation plans by the risk owners and risk management team to the risk council; and (v) receiving insights from the Company’s internal audit function. On a quarterly basis or as needed, the status of the top risks identified in management’s enterprise risk management process, along with their associated mitigation plans, is presented to the Risk Committee. Cybersecurity The Risk Committee of the Board is charged with reviewing the Company’s cybersecurity policies and processes. Management reports to the Risk Committee quarterly or as needed regarding cyber practices and procedures. The Company requires cybersecurity education and training at all levels of the organization. Spirit works to maintain the confidentiality, integrity, and availability of its information and digital resources through comprehensive and proactive compliance, privacy, incident response, cyber threat management, and enterprise risk programs developed from industry-accepted best practices. The framework for our programs is based on the U.S. Department of Defense Cybersecurity Maturity Model Certification (CMMC) and National Institute of Security and Technology (NIST) Frameworks, U.K. Cyber Defence and Risk (CyDr), Generally Accepted Privacy Program (GAPP) guiding principles, and ISO 27001/2 standards. These standards reflect well-defined processes and best-in-class technology. Succession Planning The Board is responsible for overseeing management succession planning. Mr. Shanahan currently serves as our interim CEO. Under ordinary circumstances, the Board reviews candidates for succession with respect to the CEO role and other senior management roles at least twice annually. Succession plans are developed for both ordinary course succession and contingency planning for an unforeseen event. The Board receives updates regularly on the development of succession candidates. Directors engage with potential succession candidates at Board and committee meetings and informal events. Stockholder Engagement Our Board recognizes the importance of alignment with our stockholders and places a high priority on