Company: AXS-PE
Filing Date: 2025-04-03
Form Type: DEF 14A
Source: 0001214816-25-000088
Chunk: 21

Company: AXIS CAPITAL HOLDINGS LTD
Filing Date: 2025-04-03
Form: DEF 14A
Chunk 21
---
 Audit Committees received periodic updates throughout the year on cybersecurity matters, and these updates are part of their standing agendas. These updates included reports regarding items such as cybersecurity strategies, program effectiveness, key risks and performance metrics related to the Company’s information security program.

The Company’s information security program is designed consistent with industry standards to manage risks related to the confidentiality of non-public, sensitive information and the integrity and availability of our information systems. Our program includes processes that are designed to identify, assess and monitor material risks from cybersecurity threats, which are part of the Company’s overall enterprise risk management process and have been embedded in the Company’s operating procedures, internal controls and information systems. These processes include, but are not limited to: vulnerability management, anomalous activity detection and incident response, third-party cyber risk management, and ongoing security training and awareness which includes a compulsory annual training of Company personnel on current security threats and best practices. Our program and security posture are regularly measured through penetration testing, risk assessments, and independent internal and third-party assessors and auditors.

With over 30 years of industry cybersecurity experience, the Company’s Chief Information Security Officer ("CISO") is the member of the Company’s management team with primary responsibility for the development, operation, and maintenance of the Company’s information security program. The CISO supervises the Company’s information security team, facilitates the incident response plan and acts as the liaison to the Company’s executive management team, including relaying program strategies, resource requests, and incident updates.

Information relating to cybersecurity and information security is contained in the section titled “Cybersecurity” in our Annual Report on Form 10-K for the fiscal year ended December 31, 2024.

#### Compensation Risk
For information regarding compensation-related risks, see "Compensation Discussion and Analysis – Risk Management and Compensation."

| AXIS 2025 Proxy Statement |     | 27 |

| Corporate Governance |

### Code of Business Conduct and Corporate Governance Guidelines
Our Corporate Governance Guidelines, along with our Code of Business Conduct and the charters of each of the committees of our Board, provide a framework for the corporate governance of the Company addressing matters such as director qualification standards, director responsibilities and duties and compensation of our directors. Our Corporate Governance Guidelines and our Code of Business Conduct apply to all of our directors, officers, and teammates, including our President and Chief Executive Officer, Chief Financial Officer and Global Corporate Controller, and are available on our website at www.axiscapital.com. We intend to disclose on our website any required amendment to, or waiver