Company: GTY
Filing Date: 2025-03-13
Form Type: DEF 14A
Source: 0001140361-25-008521
Chunk: 66

Company: GETTY REALTY CORP /MD/
Filing Date: 2025-03-13
Form: DEF 14A
Chunk 66
---
 adequacy of its charter at least annually and, when appropriate, recommends to the Board of Directors changes to the charter to reflect the evolving role of the Audit Committee. As part of the foregoing process, in February 2025, the Audit Committee’s Charter was revised to clarify that the Audit Committee’s oversight responsibilities for risk assessment and risk management expressly includes responsibility for GenAI. Internal Control and Financial Reporting Process The Company’s management is responsible for the Company’s system of internal control and its financial reporting process. The independent registered public accountants, PricewaterhouseCoopers LLP, are responsible for performing an independent integrated audit of the Company’s consolidated financial statements and its internal control over financial reporting in accordance with the standards of the Public Company Accounting Oversight Board (“PCAOB”) and to issue a report thereon. The Audit Committee is responsible for the monitoring and oversight of these processes. Enterprise Risk Management The Audit Committee assists the Board of Directors in its oversight of the Company’s external and internal enterprise risks, which includes assessing such risks and the effectiveness of the Company’s risk mitigation efforts, as well as the Company’s policies and procedures relating to risk mitigation and risk control for the enterprise as a whole. The Audit Committee’s oversight function includes responsibility for evaluating the impact such risks and risk mitigation efforts have had or may have on the Company’s financial reporting process and financial reports. At each quarterly meeting, the Audit Committee receives a comprehensive enterprise risk management report from the Chief Executive Officer with respect to the Company’s enterprise risk management practices and risk mitigation efforts which includes a review of the developments in such risks or mitigation efforts from previous periods. The Audit Committee Chair reports to the full Board of Directors after each quarterly meeting on any material developments in these risks overseen by the Audit Committee and the full Board of Directors reviews these risks as they may impact the enterprise at large.

| 60 |     | GETTY REALTY2025 Proxy Statement |

TABLE OF CONTENTS Report of the Audit Committee ( continued ) Information Security and Data Protection As part of the Audit Committee’s risk oversight function, at each quarterly meeting, the Audit Committee receives a report from its senior management, including its Chief Executive Officer, Chief Financial Officer or General Counsel, on the Company’s program, policies and procedures related to information security and data protection, including as they relate to financial reporting and controls and procedures with respect thereto. The Audit Committee Chair reports to the full Board of Directors after each quarterly meeting on any material developments overseen by the Audit Committee, including with respect to information security and data protection,