Company: PENG
Filing Date: 2025-12-19
Form Type: DEF 14A
Source: 0001616533-25-000073
Chunk: 23

Company: Penguin Solutions, Inc.
Filing Date: 2025-12-19
Form: DEF 14A
Chunk 23
---
;

• New Acquisition IT : Overseeing, planning, and mitigating risk in relation to the integration of new acquisitions’ IT systems and data;

• Incident Response : Overseeing any of our policies and procedures that pertain to our response to any material incidents;

• Disaster Recovery : Periodically reviewing our disaster recovery capabilities with management;

• Legal Compliance and Internal Audits : Overseeing our compliance with applicable information security and data protection laws and industry standards, and overseeing any internal audits of our IT systems and processes;

• Risk Education and Culture : Overseeing our education of employees regarding cybersecurity, AI, privacy, and related risks;

• Cyber Insurance : Reviewing our cyber insurance policies to ensure appropriate coverage; and

• Knowledge Management : Maintaining current knowledge of changing cybersecurity threats, countermeasures, and other information relevant to cybersecurity and technology risk oversight.

The Cybersecurity Committee includes directors with technology and cybersecurity experience and is currently composed of three directors: Messrs. Ingram and Papermaster (Chair) and Ms. Straub. Mr. Ingram will serve on the Cybersecurity Committee until his term expires at the conclusion of the Annual Meeting.

During fiscal 2025, the Cybersecurity Committee held three meetings. At each of those meetings, the Cybersecurity Committee received updates from our Chief Information Officer, among other members of management, on technology investments, IT programs and operations, AI governance matters, and our information security programs, matters, and efforts. Such efforts include employee information security training for new hires and our broader employee population on an annual basis. Management also timely briefs the Board on policy and regulatory cybersecurity and AI governance matters.

The Cybersecurity Committee is governed by a written charter, which can be found in the Governance section of the Investors section of our website at ir.penguinsolutions.com . The Cybersecurity Committee may request that our Chief Information Officer and other appropriate Company personnel work with the committee to review strategic plans and implementation, as well as to check on any identified issues. The Cybersecurity Committee has the sole authority to retain and terminate any advisors, including cybersecurity or data privacy experts and legal counsel, and has sole authority to approve all such advisors’ fees and other retention terms. The Cybersecurity Committee also has the authority to conduct or authorize investigations into or studies of any matters within its scope of responsibilities.

<div align='center'>19</div>

### CORPORATE RESPONSIBILITY
We strive to engage in business practices that are sustainable in addition to being beneficial to our stockholders and the wider community. We aim to set ambitious goals and make tangible investments to