Company: IMXI
Filing Date: 2025-05-12
Form Type: DEFR14A
Source: 0001683695-25-000065
Chunk: 25

Company: International Money Express, Inc.
Filing Date: 2025-05-12
Form: DEFR14A
Chunk 25
---
 our Human Resources team, the Company engages various non-profits to support low income communities, including the immigrant community, through financial support, and facilitates volunteering of Company employees to engage in house building activities and gift-giving events during different holidays throughout the year.

| 18 |     | 2025 Proxy Statement |

| PROXY STATEMENT                                        |
| ENVIRONMENTAL, SOCIAL AND GOVERNANCE (ESG) INFORMATION |

#### Governance
Our directors are committed to excellent governance, as demonstrated by:

• A fully independent board other than our Chief Executive Officer.

• A Lead Independent Director.

• All members of the Company’s Audit, Compensation, and Nominating and Corporate Governance Committees being non-employee independent directors.

• Three out of eight of our directors being ethnic minorities.

• Three out of eight of our directors being female.

• Adopting Corporate Governance Principles.

• Implementing the Company's executive management succession plan.

• Approving corporate governance policies and procedures and any revisions thereto.

#### Compliance/Data Security
To mitigate cybersecurity risks, the Company has designed and implemented a Cybersecurity and Information Security Program ("Cybersecurity Program"). The foundation of our Cybersecurity Program is based on recognized best practices and standards for cybersecurity and information technology that include the Center of Internet Security ("CIS") Controls Framework. Furthermore, we maintain strong cyber integrity standards and respect the privacy of our customers, as demonstrated by:

• Having a dedicated Chief Information Security Officer (CISO) overseeing all aspects of the Company's Cybersecurity Program.

• Maintaining Company data privacy and cybersecurity policies that follow high technical standard frameworks and adhere to applicable legal and regulatory standards.

• Having our Board of Directors and Executive Management review and support our Cybersecurity Program and cybersecurity measures on a quarterly basis or more frequently if warranted.

• Having a cybersecurity expert on our Board of Directors.

• Having a cybersecurity incident response plan and team that meets at least annually to assess breach scenarios and improve our response capabilities.

• Engaging a third party to perform an annual cybersecurity audits and assessment, which attests compliance with our Cybersecurity Program and industry best practices.

• Engaging a third party to perform an annual cybersecurity risk assessment, enabling the organization to focus cybersecurity investments on areas with the greatest potential impact.

• Maintaining strong cyber-related insurance, incident response service retainers, and ransomware mitigation services to ensure timely handling of cyber incidents should they occur.

• Performing ongoing vulnerability reviews and conduct annual penetration testing of both external and internal systems with the assistance of a third party.

• Not having any material Company