Just as we hold ourselves accountable, we also hold our suppliers accountable for the quality of their products and services. We audit suppliers through our Global Sourcing program periodically — pursuant to a documented audit plan — to help ensure they remain in compliance with our expectations. Suppliers are prohibited from making any changes to a product without our written approval. Responsible Sourcing A reflection of McKesson’s expectations of our supplier partners, the MSSP guide us in how and where we source our private-label products. Established in 2012, the Responsible Sourcing program provides a framework that holds our international private-label suppliers to an auditable set of expectations. Private-label suppliers outside the U.S. must agree to comply with the MSSP, which address compliance with applicable laws along with adherence to our principles on protecting workers, preparing for emergencies and protecting the environment. These principles likewise reflect our stance against forced and child labor, which is also articulated in our response to the UK Modern Slavery Act for our UK business . In accordance with our responsible sourcing processes, we conduct onsite audits — or consult other appropriate resources — to periodically monitor compliance with the MSSP, including document review, a factory tour, and interviews with workers. We document findings and require suppliers to remediate instances of noncompliance. We focus our remediation efforts on issues around labor and working conditions, health and safety, environmental, legal compliance, permits, business integrity, risk management and emergency response. For example, we work with suppliers to address concerns regarding living conditions of workers in factory dormitories, and we provide training for suppliers as appropriate and applicable. When issues are identified, McKesson auditors work with the supplier to ensure improvements are made. Audit findings or non-conformances are prioritized based on risk. When critical issues are identified, McKesson requires a timely response from the supplier. If a supplier fails to adequately remediate the issue, the relationship is reevaluated and, if necessary, terminated. We strive to conduct business with companies that share our values, ethics, and sustainability principles and that effectively incorporate these values into their business practices and management systems. To that end, McKesson seeks to continuously improve its Responsible Sourcing program to ensure that it addresses the needs and risks of today. Product quality and safety As a company in the healthcare industry, we are subject to a wide range of complex and evolving regulatory requirements. We are committed to We audit suppliers through our Global Sourcing program periodically — pursuant to a documented audit plan — to help ensure they remain in compliance with our expectations . Introduction Stories Employees Access Equity Climate Operations >Table of Contents | 63 FY21 Impact Report

McKesson ESG Report - Page 63 McKesson ESG Report Page 62 Page 64