Company: UVSP
Filing Date: 2025-03-14
Form Type: DEF 14A
Source: 0000102212-25-000009
Chunk: 55

Company: UNIVEST FINANCIAL Corp
Filing Date: 2025-03-14
Form: DEF 14A
Chunk 55
---
 differing risks the Corporation is encountering and also to provide perspective with respect to enterprise-wide risk management to the members of the Board of Directors attending these meetings. The Chief Risk Officer also meets in executive session with the Audit Committee on a quarterly basis.

The Enterprise-Wide Risk Management Committee provides oversight, from a risk perspective, of information systems security. In that regard, the Chief Information Security Officer provides information security updates to the Enterprise-Wide Risk Management Committee at each Enterprise-Wide Risk Management Committee meeting. Additional information security training is provided through a management Information Security Steering Committee and also through targeted training that is overseen by the Chief Information Security Officer. In addition, the Corporation has implemented a Cyber Incident Response Plan in order to provide a structured and systematic incident response process for information security incidents that affect any of the information technology systems, network, or data of the Corporation. The Cyber Incident Response Plan is implemented

<div align='center'>37</div>

and maintained by the Corporation’s Chief Information Security Officer and is subject to annual review and approval by the Enterprise-Wide Risk Management Committee.

#### Shareholder Nominations
Article II, Section 17 of the Bylaws governs the process of nominations for election to the Board of Directors. Nominations made by shareholders entitled to vote for the election of Directors must be made by written notice, delivered or mailed by registered return receipt mail, postage prepaid, to the Secretary of the Corporation, not less than fifty (50) days prior to any meeting of the shareholders called for the election of Directors; provided, however, that if less than twenty-one (21) days' notice of the meeting is given to shareholders, such a nomination must be delivered or mailed to the Secretary of the Corporation not later than the close of business on the seventh (7 th ) day following the date on which the notice of the meeting was mailed to the shareholders.

Such notification must contain the following information:

a. The name, age and resident address of each of the proposed nominees;

b. The principal occupation or employment and business address of each proposed nominee;

c. The total number of shares of the Corporation that, to the knowledge of the nominating shareholders, is held by each of the proposed nominees;

d. The name and resident address of the nominating shareholder; and

e. The number of shares owned by the nominating shareholder.

The nomination of a Director by the Corporation who has not previously served as a Director must be made from and among the then serving Alternate Director(s) except in connection with the execution by the