Company: PAYC
Filing Date: 2025-04-03
Form Type: DEF 14A
Source: 0001193125-25-072358
Chunk: 11

Company: Paycom Software, Inc.
Filing Date: 2025-04-03
Form: DEF 14A
Chunk 11
---
 to limit, monitor or control such exposures.                                       |     | Compensation Committee   Oversees risks related to our compensation program and practices.   In conjunction with management, reviews the potential risks arising from compensation design and is responsible for ensuring resulting programs appropriately balance risk and reward. |     | Nominating and Corporate Governance Committee   Oversees risks related to corporate governance, the composition of our Board of Directors and its committees, and risks related to our social responsibility and environmental sustainability.   Annually reviews the composition of our Board of Directors and its committees to ensure appropriate skills and independence. |
| Senior Management Team   Our senior management team is responsible for assessing, implementing and managing our risk management processes on a day-to-day basis, and for reporting to the Board on significant risks and risk management programs. Our senior management team, along with risk management leaders and our internal audit function, meet regularly to assess risk and ensure proper risk governance. |     |                                                                                                                                                                                                                                                                                     |     |                                                                                                                                                                                                                                                                                                                                                                               |

| Functional Risk Management   Our senior management team delegates to specific business function leaders responsibility for assessment, identification and mitigation of certain risks, such as those related to talent, finance, and cybersecurity. These business function leaders regularly report to the senior management team on the scope of such risks and the steps taken to detect, monitor, and mitigate risk exposure. |     | Internal Audit   Our internal audit function reports to the Audit Committee and is responsible for maintaining and improving our risk management, corporate governance, and internal control environment. |

Board Oversight of Cybersecurity and Automation Risks The Board of Directors has delegated to the Audit Committee primary responsibility for overseeing enterprise risk management, including oversight of risks from cybersecurity threats. Our Chief Information Officer oversees the activities of our information technology and information security teams. Our Chief Information Officer, together with our Vice President of Information Technology and Information Security (who reports to our Chief Information Officer), is responsible for designing, implementing, and managing our information security risk management program, which includes our cybersecurity policies, practices and infrastructure. To assess whether our risks related to cybersecurity are being appropriately managed, the Audit Committee receives quarterly reports and updates from our Chief Information Officer and our Vice President of Information Technology and Information Security with respect to cybersecurity risk management. Such reports cover our information security program, including its current status, capabilities, objectives and plans; the outcomes of regular business continuity, crisis communications, and disaster recovery exercises; updates on our ongoing compliance with applicable regulations and international cybersecurity standards; participation rates in our twice annual information security and monthly phishing trainings for employees;