Company: INVH
Filing Date: 2025-04-03
Form Type: DEF 14A
Source: 0000950170-25-049911
Chunk: 39

Company: Invitation Homes Inc.
Filing Date: 2025-04-03
Form: DEF 14A
Chunk 39
---
 on protecting our residents’ and associates’ data. We follow a cloud-first approach to enable efficient scaling, robust business continuity, and access to the latest technology innovations. Our cybersecurity risk management program aims to protect and preserve the confidentiality, integrity, and continued availability of our residents’ and associates’ data and includes controls and procedures for the identification, containment, and remediation of cyber threats.

We have also adopted a robust cybersecurity risk governance model, including the formation of the Cybersecurity Governance Committee, composed of key leaders from stakeholder groups throughout the Company and chaired by our Vice President, Chief Information Security Officer. We maintain a robust information security training program that includes annual information security training for all associates, as well as additional role-specific information security training.

Our Board has an advanced understanding of its role and that of management in cyber-risk oversight and is well-positioned to guide management in the development and implementation of an effective cybersecurity risk program. The Board delegates oversight and control of our cybersecurity program to the Audit Committee, which is responsible for ensuring that management has risk-based processes in place designed to assess, identify, and manage major technology and information security risk exposures, including cybersecurity risks to which our Company is exposed. Two members of our Audit Committee hold cybersecurity certifications: Ms. Sears holds a Cyber Risk and Strategy Certification from Diligent Institute; and Ms. Barbe holds a CERT Certificate in Cybersecurity Oversight from the National Association of Corporate Directors. Mr. Howard, a member of the Audit Committee, brings extensive practical experience in, and domain expertise related to, cybersecurity, shaped by his prior service with the SEAL Teams and Joint Special Operations of the U.S. Navy. The Audit Committee receives regular reports from our Executive Vice President, Chief Information and Digital Officer on the state of our Company’s cybersecurity

#### 2025 Proxy Statement33
The Board of Directors and Certain Governance Matters program, including relevant metrics and threat intelligence, as well as reports on internal and external assessments of our cybersecurity program. We expect that our cybersecurity risk management processes and strategy will continue to evolve as the cybersecurity threat landscape evolves. As a backstop to our strong information security programs, policies, and procedures, we purchase a cybersecurity risk insurance policy that would defray the costs of an information security breach, if we were to experience one. For more information on our cybersecurity program, see Part I. Item 1C. “Cybersecurity” in our 2024 Form 10-K. The table below illustrates the Board’s and management’s key responsibilities in managing and overseeing risk throughout the Company