Company: IBTA
Filing Date: 2025-04-11
Form Type: DEF 14A
Source: 0001628280-25-017508
Chunk: 18

Company: Ibotta, Inc.
Filing Date: 2025-04-11
Form: DEF 14A
Chunk 18
---
 approach, our Board of Directors regularly reviews our strategic and operational risks in the context of discussions with management, question and answer sessions, and reports from the management team at each regular meeting of our Board of Directors. Our Board of Directors also receives regular reports on all significant committee activities and evaluates the risks inherent in significant transactions.

In addition, our Board of Directors has tasked designated standing committees with oversight of certain categories of risk management. The Compensation Committee is responsible for overseeing the management of risks relating to our executive compensation philosophy and practices applicable to all employees to determine whether they encourage excessive risk-taking and evaluates policies and practices that could mitigate such risks. The Nominating and Corporate Governance Committee is responsible for overseeing the management of risks associated with the independence of our Board of Directors and potential conflicts of interest. The Audit Committee is responsible for overseeing the management of risks relating to accounting matters, internal controls over financial reporting and disclosure controls and procedures, and legal and regulatory requirements. Our Audit Committee also, among other things, discusses with management, the internal auditors, and the independent auditor guidelines and policies with respect to risk assessment and risk management, as well as potential conflicts of interest. The Audit Committee further oversees our initiatives related to cybersecurity, including our Information Security program. Our Information Security program includes our initiatives designed to assess, identify, and manage cybersecurity risks (including risks related to our third-party vendors) and also includes periodic risk assessments, third-party penetration tests, and third-party audits. Our Information Security program is established by our Information Security Committee, which is a management committee composed of members of senior management and overseen by our Chief Technology Officer and Vice President of Risk Management and IT. The efforts of our Information Security Committee inform management’s updates to the Audit Committee concerning cybersecurity risks and risk management.

Our Board of Directors believes its current leadership structure supports the risk oversight function of the Board. As Chairman, Mr. Leach has primary responsibility for setting the agenda for meetings of the Board of Directors and his combined role as Chief Executive Officer and Chairman gives him unique insight into the risk profile of the Company, including emerging risks.

#### Board Committees
Our Board of Directors has established three standing committees: an Audit Committee, a Compensation Committee, and a Nominating and Corporate Governance Committee. In addition to these standing committees, from time to time, our Board of Directors may designate a committee consisting of one or more directors on an ad hoc basis, including for purposes of evaluating and/or approving specific projects or transactions. The current composition and responsibilities of each of the committees of our Board of