McKesson has multiple channels for employees to raise concerns: Phone Email HR Legal People leader Compliance officer assessed periodically and updated to align with changes in laws, regulations and/or policies. Monitoring and testing We have implemented a range of compliance monitoring and testing activities, including data analytics, to monitor the adequacy and effectiveness of our compliance programs to mitigate risks. These programs enable us to identify trends and potential red flags, provide insights about our program’s robustness, and identify opportunities for continuous improvement. Identified issues and opportunities are addressed through action plans. Confidential reporting channels and internal investigations McKesson employees are a critical line of defense in ensuring that we detect and respond to potential compliance issues. We strongly encourage employees to raise concerns if they observe conduct that potentially violates a law, regulation, our Code of Conduct, or any of our policies. McKesson offers multiple channels for employees and third parties to raise concerns. Employees may contact any people leader, compliance officer, human resources, or the legal department with concerns. Employees may also report concerns by email. In addition, McKesson provides confidential integrity hotlines available 24 hours a day, seven days a week, 365 days a year with multiple language capabilities. McKesson’s integrity hotlines allow employees and third parties to raise concerns (anonymously if they wish) about potential violations of law, regulation, McKesson’s Code of Conduct, McKesson policies, or any other actual or potential misconduct. An independent third-party provider (in Europe, an ombudsman) answers and documents all calls before forwarding them to McKesson. The integrity hotlines are publicized in multiple ways, including in our Code of Conduct, in training materials, on our internal websites, and through awareness campaigns. Our internal policies are designed to protect employees from retaliation for raising concerns, asking questions, seeking guidance or participating in an investigation. By fostering an open reporting environment where all employees have confidence that they can speak up without fear of retaliation, we seek to advance our culture of compliance and integrity. McKesson takes all concerns seriously and investigates allegations of misconduct. After investigating, we develop and carry out a corrective and preventive action plan, as appropriate. Consistent with our corporate governance guidelines, we also provide reports of significant matters to the Compliance Committee and the Audit Committee of the Board. The Audit Committee of the Board also receives reports on allegations and investigations regarding accounting, internal accounting controls, or audit matters. Introduction Stories Employees Access Equity Climate Operations >Table of Contents | 61 FY21 Impact Report