Company: RNST
Filing Date: 2025-02-26
Form Type: PRE 14A
Source: 0000715072-25-000057
Chunk: 22

Company: RENASANT CORP
Filing Date: 2025-02-26
Form: PRE 14A
Chunk 22
---
 The ERM committee and the Bank’s technology committee oversee risks related to our technological infrastructure, information security, cybersecurity, business continuity and disaster recovery programs. These committees meet quarterly, and their activities are reported to the full board. The technology committee is responsible for the oversight of our strategies and operations with respect to information technology matters. Although the technology committee’s focus is not limited to information security and cybersecurity risk, at each meeting the committee receives a report from our chief information security officer on, among other topics, the status of any cybersecurity and network security initiatives designed to enhance our cybersecurity, emerging cybersecurity risks that may not yet be addressed by existing risk metrics (discussed in the next paragraph) and management’s plans to mitigate such risks, and employee training on cybersecurity and related issues. The chair of the technology committee is a member of the ERM committee, enabling the chair to convey to the ERM committee details of the discussions with respect to the chief information security officer’s report as well as other matters related to our technological infrastructure and the impact thereof on matters within the ERM committee’s focus.

The ERM committee incorporates the assessment, monitoring and mitigation of cybersecurity risk into its monitoring of Renasant’s broader enterprise risk management function. We track numerous risk metrics relating to cybersecurity, and at each meeting the ERM committee receives a report from our chief risk officer on the status within established tolerances of each risk metric as well as management’s assessment of the metric’s trend of increasing or decreasing risk. These metric reports give the ERM committee a broad view of the aggregate cybersecurity risk that we face at any particular time, insight into any particular areas of risk, and an opportunity for the committee to discuss with management the steps taken or that will be taken to address risks that are out of tolerance or trending in that direction. In addition to this report, the chief information security officer’s report to the technology committee described above is included in the materials for ERM committee meetings, and the chief information security officer attends ERM committee meetings, providing additional detail, and answering committee members’ questions, about this report.

For additional information about Renasant’s cybersecurity policies, procedures, and governance, please refer to the information in Item 1C, Cybersecurity, in our Annual Report on Form 10-K for the year ended December 31, 2024.

• Operational Risk. Operational risk is the risk of loss associated with our day-to-day banking activities arising from failures caused by or related to system or processing errors, internal and external fraud, legal claims, and business disruptions