Sustainability For Our For Our Creating Value For the For Our Managing Appendix at MetLife Workforce Customers as an Investor Environment Communities Responsibly Cybersecurity and Data Privacy MetLife’s customers, employees and Compliance and other lines of business oversee business partners around the world provide our information technology security policies, us with their personal information every emerging risks and compliance requirements. day. We recognize that privacy and data Every year, we conduct mandatory protection are significant concerns for both cybersecurity and privacy training for companies and individuals, and we have all employees to raise awareness about Each October for Cybersecurity Awareness a longstanding commitment to protect potential threats and to give them clear personal information and use it responsibly. actionable guidelines to inform their Month, MetLife raises awareness about the importance of cybersecurity and provides Our policies and procedures are designed everyday tasks and decision making. employees with the resources they need to protect the confidentiality and security We have established reporting processes to protect themselves, our customers and of personal information and ensure that and escalation pathways from our MetLife. In 2021, our campaign was organized information is handled appropriately businesses and functions to ensure that worldwide, which includes key areas such as potential personal data incidents can be around weekly themes and included speaking safeguards and risk management; monitoring; events, YamJams, articles and other interactive incident response; cybersecurity and assessed and handled in a timely manner— engagement opportunities. e-discovery investigation; and threat including reporting to senior management, intelligence. Our Global Privacy & Information as needed. Security Program establishes enterprise-wide We are also participants in industry principles and global minimum standards, cybersecurity groups and events, such among other things, around the collection as Cybersecurity Awareness Month, and use of personal information in compliance a national campaign sponsored by the with applicable privacy laws and regulations. Department of Homeland Security that An internal committee of Business Information was created to raise awareness about Security Officers with representation from 1 cybersecurity and staying safe. Technology, Law, Internal Audit, HR, 1. PLEASE SEE METLIFE 2022 PROXY STATEMENT FOR ADDITIONAL INFORMATION. 2021 SUSTAINABILITY REPORT 83