Company: KELYB
Filing Date: 2025-04-14
Form Type: DEF 14A
Source: 0001193125-25-080159
Chunk: 19

Company: KELLY SERVICES INC
Filing Date: 2025-04-14
Form: DEF 14A
Chunk 19
---
 the Audit Committee every quarter, providing both written reports and live interactive presentations. Its current activities remain focused on mitigation and oversight of specific risk exposures, analysis of the breadth and effectiveness of existing risk management practices, and maturation of measurement and monitoring practices concerning high-priority strategic and operational risks. Current areas of particular emphasis include cybersecurity, artificial intelligence, data privacy, strategic risk, integration of risk appetite practices into the Company’s ongoing operations, wage-hour risk, third-party risk, human capital risk, and improvements to the Company’s compliance governance practices. The Company’s information technology and internal audit groups provide regular quarterly updates to the Audit Committee with respect to the Company’s proactive approach to the management of cybersecurity, AI and other compliance controls. Controls are reviewed for operational effectiveness and to provide reasonable assurance that: business risk is managed; employee, customer and supplier data, corporate information, and other assets are safeguarded; business processing infrastructure and applications are maintained; and all risks are mitigated to the extent practicable. The Company’s ERM program provides ongoing risk identification, oversight, guidance, and mitigation in coordination with the Company’s information technology group. Teams from the Company’s information technology, data privacy, and compliance functions coordinate on cybersecurity, artificial intelligence, and privacy governance. This includes internal monitoring to proactively identify potential security threats, maintenance of access controls, asset management, response and recovery activities, and training and awareness programs. The company’s training program provides specialized training on a quarterly basis to employees and directors, including mandatory new hire cyber and privacy training, quarterly focused cyber trainings, and monthly training exercises for identifying phishing attempts. Evaluation of these practices is reported to the Audit Committee on a quarterly basis. In addition to the reports submitted quarterly by the Company’s Chief Risk Officer, the Vice President of Internal Audit independently assesses the Company’s risk management process and separately reports on the effectiveness of the Company’s risk identification, prioritization, and mitigation processes to the Audit Committee. The ERM team plays a key role in the Company’s response to domestic and global crises, providing Board updates and scenario planning regarding impacts on cybersecurity, employee health and safety, corporate operations, and global markets.

| 27 |

Corporate Governance

| INFORMATION SECURITY AND BUSINESS CONTINUITY |     |                                                                                                                                                                                                                                                                                  |     |                                                                                                                                                                                                                                                                                                                 |
|                                              |     | Emergency Management Team   Global, interdepartmental group empowered to quickly make strategic decisions in response to critical events that affect our employees, facilities or business operations.                                                                           |     | Third Party Risk Management   We monitor critical