Company: SUZ
Filing Date: 2025-04-28
Form Type: 20-F
Source: 0001628280-25-020368
Chunk: 44

Company: Suzano S.A.
Filing Date: 2025-04-28
Form: 20-F
Item: Item 16
Chunk 44
---
 is primarily responsible for overseeing cybersecurity threat-related risks through the specific Cybersecurity management, and always connects with the Company's corporate risks. The Head of Technology has 30 years of experience in information technology, business management, operations and logistics acquired through the leadership of projects and in different types of industries such as consumer goods, electronics, metallurgy, steelmaking, and petrochemicals during 16 years of consulting, and 14 years at a global mining company.
At Suzano, she leads a robust Information Technology team, where one of the managements is responsible for Cybersecurity. In the position of Cybersecurity Manager, we have a leader with expertise in the subject and over 14 years of experience in Cybersecurity, having led the topic in various industries.
To fulfill this responsibility, it is equipped with information from established information security processes and controls, periodically reporting strategic indicators to the security committee, and to the audit and executive committees as requested.
Management
We have an internally formalized process, based on the ISO 27005 framework, that defines the management of cybersecurity risks, aiming to identify, monitor, and communicate information security risks that may impact the business through a systematic approach and a continuous process, monitoring and, whenever possible, reducing the likelihood of causing any type of damage to our assets. Risks are periodically reported to management, as well as relevant information security incidents.
Table of Contents

Board
Cybersecurity is periodically on the agenda of our Board of Directors, in addition to specific Cyber Committees within the company alongside executives. There is monitoring and reporting to the company's Audit team and Corporate Risk team, where Cybersecurity is also overseen by the Board on their respective agendas.
Table of Contents

PART III