Company: MCHB
Filing Date: 2025-04-15
Form Type: DEF 14A
Source: 0001518715-25-000066
Chunk: 32

Company: Mechanics Bancorp
Filing Date: 2025-04-15
Form: DEF 14A
Chunk 32
---
 policies is overseen by those officers along with our Information Security Program Office.

Certain of these programs and policies address incident response processes, including a cyber incident response plan, with controls and procedures designed to provide for the timely and accurate investigation and reporting of cybersecurity incidents as required by applicable legal obligations, including the reporting of material cybersecurity incidents. The ERM Committee receives quarterly reports from the Chief Information Officer, the Chief Information Security Officer and Chief Risk Officer as well as interim reports on noteworthy cybersecurity events and the impact, if any, on the Company. The Board and the ERM Committee also periodically receive updates about the results of exercises and response readiness assessments led by internal staff as well as outside advisors who provide a third-party independent assessment of our cybersecurity and information security technical program and our internal response preparedness. The ERM Committee regularly briefs the full Board on these matters, and the full Board also receives periodic briefings on cyber threats to enhance our directors’ literacy on cybersecurity issues.

The ERM Committee has engaged a cybersecurity expert to work closely with the ERM Committee to provide external review of our cybersecurity-related policies and processes and to provide training and advice on cybersecurity and information security matters. The ERM Committee often presents the expert's materials to the full Board to update all directors on cybersecurity and information security risks. Our employees are required to receive periodic training in cybersecurity and information security risk management and mitigation through corporate training courses and regular phishing exercises. We maintain an additional insurance policy designed to help defray the potential costs of losses associated with cybersecurity incidents.

#### Employee Compensation Risks
HomeStreet’s management and the Compensation Committee have assessed the risks associated with our compensation policies and practices for all employees, including non-executive officers. Based on the results of this assessment, we do not believe that our compensation policies and practices for any employees, including non-executive officers, create excessive risks or risks that are reasonably likely to have a material adverse effect on HomeStreet.

#### Board Meetings and Committees
During the year ended December 31, 2024, the Board held 23 meetings. Each of our directors attended or participated in 75% or more of the aggregate of the total number of meetings of the Board and the total number of meetings held by all committees of the Board on which that director served during the past fiscal year.

The Board has five standing committees: the Executive Committee, the Audit Committee, the ERM Committee, the Compensation Committee and the N&G Committee.

<div align='center'>24</div>

2024 Committee Memberships of Directors of Home