69 2021 ESG REPORT THE BIG PICTURE EMPOWERING WOMEN ENABLING OPPORTUNITY ENRICHING COMMUNITIES GOVERNANCE Unit of Topic Activity Metric Category Measure Code Data Reference E-Commerce Data Security Description of Discussion N/A CG-EC-230a.1 We do our best to provide our customers with a safe and convenient shopping Sustainability approach to identifying and Analysis experience. We have put in place a wide variety of technical and organizational Webpages: Privacy and addressing data security measures to help protect the personal information we collect about Policy security risks our customers. 2021 Proxy Statement The Board’s Audit and Finance Committee oversees data privacy and cybersecurity programs and regularly briefs the Board on material concerns. To respond to the threat of security breaches and cyberattacks, the company maintains a program designed to protect and preserve the confidentiality, integrity, and continued availability of all information owned by, or in the care of, the company. This program also includes a cyber incident response plan that provides controls and procedures for timely and accurate reporting of any material cybersecurity incident. For further information, please see Gap Inc.’s Code of Business Conduct. Employee Employee engagement Quantitative Percentage CG-EC-330a.1 2,000+ HQ Pulse survey participants and 23,000+ store Pulse survey ESG Report: Talent Recruitment, as a percentage (%) participants; 95 percent average score for “I am proud to work here” and Development p. 29 Inclusion, & 89 percent “I intend to stay for the foreseeable future” from Pulse survey Performance participants. A representative sample was obtained for both groups. This is Gap Inc.’s own survey, conducted internally. Answers are often scored on a Likert scale of 1–5 (strongly disagree -> strongly agree). Examples of questions asked in the Pulse survey include: On a scale of 1–5, to what extent do you agree with the following statements: - I am proud to work here - I believe this company operates with integrity - My manager seeks out and values my perspective How important are the following to you, and how well does Gap Inc. do this: - I am able to have flexibility in my work schedule - I work for a company with strong reputation and purpose - My company employs inspiring and effective leaders