Company: ZM
Filing Date: 2025-05-01
Form Type: DEF 14A
Source: 0001140361-25-016910
Chunk: 23

Company: Zoom Communications, Inc.
Filing Date: 2025-05-01
Form: DEF 14A
Chunk 23
---
 assist our Board of Directors in fulfilling its oversight responsibilities in certain areas of risk. Our Audit Committee assists our Board of Directors in fulfilling its oversight responsibilities with respect to risk management in the areas of internal control over financial reporting and disclosure controls and procedures, legal and regulatory compliance, and discusses with management and the independent auditor guidelines and policies with respect to risk assessment and risk management. Our Audit Committee also reviews our major financial risk exposures and the steps management has taken to monitor and control these exposures. Our Audit Committee also monitors certain key risks on a regular basis throughout the fiscal year, such as risk associated with internal control over financial reporting and liquidity risk. Our Nominating and Corporate Governance Committee assists our Board of Directors in fulfilling its oversight responsibilities with respect to the management of risk associated with board organization, membership and structure, and corporate governance. Our Compensation Committee assesses risks created by the incentives inherent in our compensation policies. Our Cybersecurity Risk Management Committee and our Board of Directors address the primary cybersecurity risks associated with our business. Our Cybersecurity Risk Management Committee assists our Board of Directors in fulfilling its oversight responsibility. Our Board of Directors appreciates the evolving nature of our business and industry and is actively involved with monitoring new threats and risks as they emerge. In particular, our Board of Directors is committed to the identification, timely detection, protection against, appropriate response to, and mitigation of the effects of cybersecurity threats or incidents on Zoom. Our Cybersecurity Risk Management Committee actively engages in such activities as (i) considering input from the Zoom cybersecurity team and others to better understand the threats to the security of Zoom’s services and their impact on Zoom’s business and (ii) evaluating methods for validating the effectiveness of Zoom’s cybersecurity efforts. In particular, our Chief Information Security Officer provides regular briefings to our senior management and our Cybersecurity Risk Management Committee concerning relevant cybersecurity risks and the processes we have implemented to address them. Our Cybersecurity Risk Management Committee, and our Board of Directors also receive various reports, summaries, and presentations related to cybersecurity threats, risks, and mitigations. At periodic meetings of our Board of Directors and its committees, management reports to and seeks guidance from our Board of Directors and its committees with respect to the most significant risks that could affect our business, such as legal risks, information security and privacy risks, and financial, tax and compliance related risks. In addition, among other matters, management provides our Audit Committee periodic reports on our compliance programs and investment policy and practices. 14

TABLE OF CONTENTS

Insider Trading Policy We have adopted an insider