2021 SUSTAINABILITY HIGHLIGHT REPORT: Forward As One GOVERNANCE 36 ANTI-BRIBERY AND CORRUPTION CORRUPTION INCIDENTS in 2021. 0 We are committed to conducting business with the highest ethical standards around the globe and complying with all applicable anti-bribery and corruption laws Our company’s program prohibits anyone doing business on our behalf from engaging in government bribery, commercial bribery or facilitation payments We also provide information on how to report bad behavior PROGRAM ENHANCEMENTS Given our expanded global presence, we have made enhancements to our anti-corruption program, including: • Revising the policy and risk assessment framework • Designing a monitoring and auditing framework • Developing new training content The assessment helps us to: • Ensure compliance with laws and regulations designed to combat money laundering and terrorist financing • Prevent the use of company funds, assets or resources for unlawful or corrupt purposes • Comply with all laws and regulations including those concerning the provision and use of products We are dedicated to business resiliency and believe that effective planning is critical to reducing business disruption Our robust business continuity strategy is consistent with industry best practices, providing reasonable assurance that we are prepared for—and can recover from—emergencies, disasters, pandemics and cybersecurity threats and events We continue to evolve our resiliency practices in response to the evolving environment including the use of new technologies to help lessen the threat of cyber-related events Our recovery strategy includes: • Reducing single points of dependency We maintain multiple data centers in geographically dispersed locations and invest in redundant equipment to support the recovery of critical infrastructure and applications • Comprehensive testing to validate resiliency capabilities for relevance and effectiveness, including: » Business Resumption Plans and Application Disaster Recovery plans, according to established framework » Emergency Response Plans for each office, which are required to be exercised at least annually • Enterprise Crisis Management program that includes pre-established protocols and crisis response teams for a variety of events (e g , cybersecurity), exercised at least annually • Annual evaluations to ensure our resiliency strategy adheres to established policies and procedures Monitoring the Business Environment We regularly monitor the business environment to identify new or changing laws, regulations, business trends and other events with the potential to significantly affect our business operations. 7K+ FEDERAL AND STATE LAWS AND REGULATIO NS ANALYZED . Those identified as relevant were incorporated into our business operations. BUSINESS CONTINUITY