Company: ATLCL
Filing Date: 2025-04-14
Form Type: DEF 14A
Source: 0001437749-25-011863
Chunk: 16

Company: Atlanticus Holdings Corp
Filing Date: 2025-04-14
Form: DEF 14A
Chunk 16
---
 Chief Information Officer, is responsible for assessing and managing our material risks from cybersecurity threats and for our overall cybersecurity risk management program on a day-to-day basis, and supervises both our internal cybersecurity personnel and the relationship with our retained external cybersecurity consultants.

The Audit Committee receives updates from our Chief Information Officer on our cybersecurity risks on a periodic basis or more frequently if needed, and reviews metrics about cyber threat response preparedness, program maturity milestones, risk mitigation status, third party service providers and the current and emerging threat landscape. In addition, management updates the Audit Committee, as necessary, regarding any material cybersecurity threats or incidents, as well as any incidents with lesser impact potential.

The Audit Committee reports to our Board regarding its activities, including those related to key cybersecurity risks, mitigation strategies and ongoing developments, on a periodic basis or more frequently as needed. The Board also receives updates from our Chief Information Officer on our cyber risk management program and other matters relating to our data privacy and cybersecurity approach, including risk mitigations to bolster and enhance our data protection and data governance framework. Members of our Board receive presentations that include cybersecurity topics and the management of key cybersecurity risks from our Chief Information Officer as part of the continuing education of our Board on topics that impact public companies.

Executive Sessions of Independent Directors. The Board has scheduled regular executive sessions of our independent directors. At executive sessions, our independent directors meet without management or any non-independent directors present. The Board believes that executive sessions foster open and frank communication among the independent directors, ultimately adding to the effectiveness of the Board, as a whole.

Consideration and Determination of Executive and Director Compensation. The Compensation Committee has the primary authority to determine our compensation philosophy and to establish compensation for our executive officers and directors. In establishing executive officer compensation, the Compensation Committee uses its subjective evaluation of the executives’ performance and responsibilities, our overall performance and the Chief Executive Officer’s recommendations. The Compensation Committee has not used any compensation consultant in setting executive salaries, or in determining other components of executive compensation, nor does it seek formally to benchmark the compensation of our executive officers against compensation paid by other companies to their executives.

Management plays a significant role in the compensation-setting process. The most significant aspects of management’s role are:

| ● | evaluating employee performance; |

| ● | preparing information for Compensation Committee meetings; |

| ● | establishing business performance targets and objectives; |

<div align='center'>13</div>

| ● | providing background information regarding Atlanticus’ strategic objectives; and |

| ● | recommending salary levels and equity awards. |