Cybersecurity A strong cybersecurity program is essential in today’s business landscape and we have continued to invest in people, processes and next generation cybersecurity technology solutions to combat this evolving risk. Cyber threats are emerging and evolving daily so we continue to manage these cyber-risks in alignment with industry best practices and frameworks. Our commitment to cybersecurity includes a programmatic approach aiming to protect the confidentiality, integrity and availability of our systems, data and products. This continuous process ensures that measures are in place to improve and update our cybersecurity program using key methods such as independent assessments, penetration testing, vulnerabilities scanning and maintaining key industry certifications. Zimmer Biomet strives to ensure all third-party vendor management, governance and data protection programs are aligned to best practices, regulations and standards in order to reduce organizational risk. We have a dedicated global security operations team that executes the cybersecurity incident response plan and threat management, and conducts regular exercises to assure our preparedness and effectiveness. Our global cybersecurity awareness program has increased awareness of cyber threats for users and we continue to share best practices with all our team members. The cybersecurity program is led by Zimmer Biomet’s Chief Information Security Officer and the Chief Information Officer, and regular progress updates are presented to the Audit Committee of the Board of Directors. 18
ZimmerBiomet Sustainability Report Page 19 Page 21