Company: SFB
Filing Date: 2025-04-25
Form Type: DEF 14A
Source: 0001193125-25-094691
Chunk: 13

Company: STIFEL FINANCIAL CORP
Filing Date: 2025-04-25
Form: DEF 14A
Chunk 13
---
-GAAPresults: the non-GAAPresults illuminate how we structure and view our strategic acquisitions. Stifel’s acquisitions are a catalyst for organic growth. Consistent with our approach to a balanced business model, acquisitions and organic expansion of our existing businesses are roughly equal sources of our growth since 2005.

| Strengthening Controls and our Culture |

We are a Company that has grown tremendously over recent years and anticipate continued growth through the coming years. We believe that a strong and sustainable control environment is integral to achieve this end. We have also committed the effort and resources to build a platform for growth by continually enhancing our risk and control practices.

| u |     | Ongoing Risk Management. In 2024, Stifel continued to manage its balance sheet, capital, liquidity and overall risk conservatively. The Board’s Risk Management Committee oversees major risk exposures, including market, credit, capital and liquidity, operational, regulatory, strategic and reputational risks. Our Enterprise Risk Management program, under the direction of our Chief Risk Officer, and other members of the Company’s management have prepared a series of risk appetite statements that articulate our overall risk culture. The Board’s Risk Committee reviews and approves risk appetite statements at least annually and receives at least quarterly updates on the Company’s adherence to them. The Board’s Risk Committee also receives quarterly risk assessments that identify, measure, and monitor existing and emerging risks, in addition to any changes to internal controls. In addition, the Board’s Risk Committee reviews the potential effect of significant matters and decisions on the Company’s reputation. |

| u |     | Cybersecurity. The Company, including its Board and senior management, devote significant time and resources to dynamic and growing cybersecurity defense. The Risk Management Committee of the board devotes one full meeting each year to cybersecurity, and considers cybersecurity in its other meetings as appropriate. The Company’s cybersecurity architecture and layered technologies are carefully considered. Security personnel provide ongoing threat monitoring and work across technology disciplines to monitor cyber threats. The Company’s team of security architects guides and coordinates internal and external protections. Other teams focus on assurance and continually monitor and test effectiveness. Management and the Board oversee these and other measures both directly and through the Risk Management Committee. |

| u |     | Investing in our infrastructure. We have continued to build out the infrastructure that enables us to continue to execute on our growth strategies, by bolstering our risk management, compliance, and internal audit functions, and ensuring that we fully comply with new and existing regulatory requirements. For example, we have made significant additions to