ENVIRONMENTAL, SOCIAL AND GOVERNANCE REPORT • 107 SAFETY COMMUNITY PEOPLE GOVERNANCE ENVIRONMENT Cybersecurity In 2022, the Audit Committee amended its charter to formalize its oversight responsibilities concerning Valero’s initiatives and strategies respecting cybersecurity and IT risks. At least once annually, our Senior Vice President and Chief Technology Officer and the head of our Internal Audit team provide a report to the Audit Committee on Valero’s information security operations, structure and framework; various cyber and IT security metrics; Valero’s cybersecurity management program, improvement efforts and future projects; and Valero’s governance and assessments related to cyber and IT security. We have processes in place to vet our business partners to determine their compliance. Our business partners are critical to our success and reliability, and we work collaboratively with them to promote optimal performance and mutual success with safety and security protocols and programs in connection with the services they provide. At the same time, we require our business partners to comply with all federal, state and local laws, and rules, regulations, codes and ordinances. They are accountable for complying with the expectations of our policies and procedures, including, but not limited to, those related to health, safety and the environment, respect for human rights and employee rights, conflicts of interest, and anti-bribery and anti- corruption. Moreover, we have reflected these requirements and expectations in our Conduct Guidelines for Business Partners, published in 2021. Joe Gorder Chairman and Chief Executive Officer Homer Bhullar Vice President Investor Relations and Finance Jason Fraser Executive Vice President and Chief Financial Officer The publication determined the rankings from votes of nearly 3,500 money managers, sell- side researchers and buy-side analysts, who were asked to rate the companies they believe demonstrate excellence in certain categories or performance attributes. Companies that earn two or more top-three appearances in the seven distinct ranking categories are recognized as a “Most Honored Company.” Out of over 1,500 companies receiving votes, less than 10% earned the “Most Honored” distinction.