Company: MGRE
Filing Date: 2025-04-11
Form Type: DEF 14A
Source: 0001004434-25-000021
Chunk: 31

Company: AFFILIATED MANAGERS GROUP, INC.
Filing Date: 2025-04-11
Form: DEF 14A
Chunk 31
---
-party risk management process, and upon detection of an increase in the vendor’s risk

profile. In addition, we require key providers to meet appropriate security requirements and controls, and we investigate security

incidents that have impacted our third-party providers, as appropriate. We work with third-party service providers to proactively

assess our information security program and provide us with an industry view of the cyberthreat landscape, in addition to

monitoring and supporting our control environment and breach notification processes. We also have our own fully documented

proprietary security incident response plan, with defined roles and responsibilities that address notification obligations and incident

response procedures in the event of a data security breach. We are dedicated to business continuity and resiliency, and we have

documented strategies, policies, and procedures in place designed to protect employee, business, Affiliate, and Affiliate client data

in the event of an emergency or natural disaster.

For more information regarding our information security program, please see our 2024 Annual Report on Form 10-K under

“Item 1C. Cybersecurity.”

Related Person Transaction and Conflicts of Interest Oversight: Pursuant to its charter, the Audit Committee is

responsible for reviewing any related person transaction identified by management or other directors. In accordance with this

authority, the Committee has determined that there have been no related person transactions requiring disclosure under Item

404(a) of Regulation S-K other than those discussed below under the caption “Other Matters—Related Person Transactions.” Each

director, officer, and employee of the Company is also subject to our Code of Business Conduct and Ethics, which sets forth

guidelines to which AMG’s directors, officers, and employees are expected to adhere in the conduct of the Company’s business,

including with respect to identifying, reporting, and resolving potential or actual conflicts of interest resulting from related person

transactions or otherwise.

Policies and Procedures Regarding Related Person Transactions: The Audit Committee must approve all related person

transactions under the Company’s written policy. A related person transaction is any transaction that is reportable by the Company

under paragraph (a) of Item 404 of Regulation S-K in which the Company or one of its wholly owned subsidiaries or majority-owned

Affiliates is or will be a participant and the amount involved exceeds $120,000 and in which any director, nominee for director,

executive officer, any person known to the Company to be a beneficial owner of 5% or more of its voting securities, or an

immediate family member of any of