Company: GDOT
Filing Date: 2025-04-11
Form Type: DEF 14A
Source: 0001386278-25-000020
Chunk: 25

Company: GREEN DOT CORP
Filing Date: 2025-04-11
Form: DEF 14A
Chunk 25
---
 to our information security department prior to engagement with the service provider, and their approval is required prior to vendor onboarding and, using a risk-based approach, annually thereafter.

Training

The CISO, the Chief Compliance Officer and the Director of Human Resources develop annual training related to information security and the effective use of Green Dot’s information systems. New employees and contractors are required to attend information security training as part of their orientation, acknowledging in writing that they have read and understand our Information Security Policy. All employees are required annually to take information security training and annually acknowledge that they have read and understand the Information Security Policy. Training awareness topics include authentication procedures, email security precautions, phishing awareness and regulatory and policy compliance. Training completion is tracked and reported on by the Compliance department.

The information security department is staffed with a qualified, technical team of engineers. Priority is given to scheduling training for the team throughout the year. All members of the security response team and those with security breach responsibilities are trained to ensure they are aware and capable of their responsibilities.

PCI Compliance

Green Dot is a Level 1 Service Provider. The designation “Level 1 Service Provider” is reserved for large volume organizations like Green Dot that must pass annual independent on-site security audits that apply to the entire company. Such audits are performed by qualified security assessors that have been qualified by the PCI Security Standards Council and are intended to validate compliance and promote adherence to the PCI information security standards. The company is additionally externally audited to ensure SOC 2 compliance. These audits are conducted annually against multiple trust service principles.

<div align='center'>21</div>

Table of Contents

### NOMINATIONS PROCESS AND DIRECTOR QUALIFICATIONS

#### Nomination to the Board of Directors
Candidates for nomination to our Board are selected by our Board based on the recommendation of the Nominating and Corporate Governance Committee in accordance with the committee’s charter, our certificate of incorporation and bylaws and our corporate governance guidelines. In recommending candidates for nomination, the Nominating and Corporate Governance Committee considers candidates recommended by directors, officers, employees, stockholders and others, using the same criteria to evaluate all candidates. Evaluations of candidates generally involve a review of background materials, internal discussions and interviews with selected candidates as appropriate and, in addition, the committee may engage consultants or third-party search firms to assist in identifying and evaluating potential nominees.

Pursuant to the proxy access provisions of our Bylaws, an eligible stockholder or group of up to 20 stockholders may nominate one or more director candidates to be