Company: ADP
Filing Date: 2025-09-25
Form Type: DEF 14A
Source: 0001308179-25-000607
Chunk: 25

Company: AUTOMATIC DATA PROCESSING INC
Filing Date: 2025-09-25
Form: DEF 14A
Chunk 25
---
 the objectives of protecting client data and funds, and preventing security incidents that could adversely affect the confidentiality,      
 integrity, or availability of our information systems and data that resides in those systems, while also improving our system resilience    
 with the aim of minimizing the impact to our business when incidents do occur. Our global security organization is tasked with monitoring   
 physical and cybersecurity risks, including operational risks related to information security and system disruption. A cross-functional,    
 enterprise-wide management program operates to promote our global cybersecurity program’s effectiveness and members of the company’s        
 executive committee, through an executive security council, routinely review strategy, policy, program effectiveness, standards enforcement 
 and cyber issue management. Our board of directors is actively engaged in the oversight of our global cybersecurity program. More           
 information on our program is available on our corporate website, at www.adp.com. To access this information, click on “About”              
 then “Data Security.”                                                                                                                       |

| ✓ | Our board of directors receives regular, quarterly reports on these matters from our chief security officer and leadership from our global   
 product and technology organization, including on the status of projects to strengthen the company’s security systems and improve            
 cyber readiness, as well as on existing and emerging threat landscapes.                                                                      |
| ✓ | In addition, our corporate development & technology committee receives regular, quarterly reports on our global product security and         
 resiliency program led by leadership from our global product and technology organization with assistance from our chief security officer.    |
| ✓ | Concurrent and in addition to these reports, our chief administrative officer (who oversees legal, security and compliance matters) provides 
 a legal, regulatory and ethics update at each meeting of the audit committee, which includes matters of cybersecurity, as appropriate.       
 In addition, important actual or emerging cybersecurity events are communicated to the board of directors by our chief administrative        
 officer and chief legal officer, even if immaterial to us.                                                                                   |

| ✓ | Given the importance of cybersecurity to our stakeholders, our global cybersecurity program is subject to an annual third-party assessment       
 overseen by our board of directors and this assessment reviews all aspects of our cyber program.                                                 |     | ✓ | Members of our board receive a read-out of our annual cybersecurity table-top exercise for senior management to validate, test and assess 
 the effectiveness and adequacy of certain roles and decision-making processes in the event of an incident.                                |
| ✓ | Findings are reported to our board and in response, ADP develops initiatives to improve our maturity across each of the pillars of the