Company: KD
Filing Date: 2025-06-16
Form Type: DEF 14A
Source: 0001140361-25-022676
Chunk: 17

Company: Kyndryl Holdings, Inc.
Filing Date: 2025-06-16
Form: DEF 14A
Chunk 17
---
ed approach through oversight by the entire Board, as well as through its committees, each of which assists the Board in overseeing a part of our overall risk management and regularly reports to the Board, as discussed below. In that way, risk oversight responsibilities are shared by all committees of the Board, with each committee responsible for oversight of matters most aligned with the responsibilities set forth in its charter. We believe that allocating responsibility to a committee with relevant knowledge and experience provides a more focused and deeper oversight of risk. This allows for a multi-tiered approach to risk oversight, with the full Board retaining overall oversight responsibility.

| 18|KYNDRYL2025 PROXY STATEMENT |

TABLE OF CONTENTS Our senior leadership team is responsible for managing our enterprise risk management program under the oversight of the Audit Committee, which periodically reviews the Company's enterprise risks and related enterprise risk management framework and processes. Responsibility for managing each of our highest priority risks is assigned to one or more members of our senior leadership team. Line management under the leadership of key senior leaders perform the daily processes, controls and practices of our risk management program. Our enterprise risk management program is designed to identify, assess and manage our risk exposures, and management regularly reports to the Board and its committees on our material operational, strategic and financial risks (over the short-, intermediate- and long-term) and plans to monitor, manage and mitigate these risks, as described below. Each committee also, when desired by the applicable committee, meets with outside advisors (including consultants and experts) in executing its risk oversight responsibilities. The Boardis responsible for the overall oversight of our enterprise risk management program and receives regular updates from management on our material operational, strategic and financial risks (over the short-, intermediate- and long-term) and plans to monitor, manage and mitigate these risks. With respect to operational and strategic risks, the Board receives periodic updates from: our Chief Information Security Officer, Chief Information Officer, Security & Resiliency global practice leader and other senior leaders with respect to cybersecurity and data privacy matters; our Chief Human Resources Officer on compensation and human capital matters; and our Global Head of Corporate Affairs and Senior Vice President, Global Citizenship & Sustainability with respect to environmental and corporate responsibility matters. The Board considers the foregoing matters so critical to our business that it maintains concurrent oversight over them with its committees. The Audit Committeeperiodically reviews our accounting, reporting and financial practices and risk exposures, including with respect to the integrity of our financial statements, our financial reporting, our administrative, financial and disclosure controls, our enterprise risk