Company: NOC
Filing Date: 2025-04-04
Form Type: DEF 14A
Source: 0001133421-25-000016
Chunk: 14

Company: NORTHROP GRUMMAN CORP /DE/
Filing Date: 2025-04-04
Form: DEF 14A
Chunk 14
---
 of risks related to human rights, health and safety, corporate social responsibility and political contributions 
 •Oversight of  environmental and sustainability policies, programs and reports                                              |     | NOMINATING AND CORPORATE GOVERNANCE COMMITTEE                                                                                                       
 •Oversight of governance-related risks (including the Company's corporate governance policies and practices) and risks related to corporate culture 
 •Assist the Board in its oversight of succession planning risk                                                                                      |
| ENTERPRISE RISK MANAGEMENT COUNCIL (ERMC)                                                                                                                                                                                                                                                                                                               |     |                                                                                                                   |     |                                                                                                                             |     |                                                                                                                                                     |
| •Designed to ensure that the Company has identified significant risks (including emerging risks) and is effectively managing such risks, including by developing comprehensive mitigation plans                                                                                                                                                         
 •Comprised of all members of the Executive Leadership Team (ELT), as well as the Chief Accounting Officer, Corporate Secretary, Treasurer, Chief Ethics and Compliance Officer, Chief Sustainability Officer and VP, Internal Audit and also attended by the Chief Information and Digital Officer, Chief Technology Officer (CTO) and VP, Supply Chain 
 •The Steering Committee, comprised of certain ELT members, and the Working Committee, comprised of certain VP-level ERMC members, meet multiple times a year to align on risk calibration and management strategies                                                                                                                                     
 •The full ERMC meets twice a year to oversee, review and ensure effective management of enterprise risks and members of the ERMC brief the Audit and Risk Committee at least annually on its deliberations and significant areas of concern                                                                                                             |     |                                                                                                                   |     |                                                                                                                             |     |                                                                                                                                                     |

#### 2025 Proxy Statement29

#### Corporate Governance

### Management's Role in Enterprise Risk Management
Our governance framework has been carefully developed to ensure a comprehensive system of oversight and accountability. The Company's management, under the oversight of the Board, executes the Company's risk management strategies and is the first line of defense in identifying emerging risks.

### Enterprise Risk Management Council
The Enterprise Risk Management Council (ERMC), comprised of key members of the Company's management team, plays a vital role in reviewing the significant risks to the enterprise and ensuring effective consideration, mitigation, and management. For each significant risk, the Company identifies a senior executive responsible for its management. During meetings of the ERMC, the Council receives updates from each management lead, with particular focus on any significant changes in the risk profile or necessary mitigations for such risk. During its meetings, the Council also discusses risk mitigation strategies, process enhancements and evolving and