40 Social The company has a Vice President of Information Security who oversees a team of employees dedicated to information security. We strive to protect sensitive information through various means, such as technical safeguards, procedural requirements and policies, a program of monitoring to detect and address unauthorized modification or misuse, continuous testing of aspects of our security internally and with outside vendors, a robust incident response program, and regular training for employees. TC-IM-230a.2 Description of approach to identifying and addressing data security risks, including those of third-party cybersecurity standards TOPIC ACCOUNTING METRICS - INTERNET MEDIA & SERVICES 2020 2021 SASB CODE DATA SECURITY