Experian ESG Presentation Deck

Executive Summary Improving Financial Health Employees Social - Data Security - What is DevSecOps? 36 Data DevSecOps We use a DevSecOps approach to product development An old style approach is to apply security to a product once its been developed. In contrast, DevSecOps means thinking about application and infrastructure security from the start and aims to integrate security controls in the early stage of product development, rather than implementation at the end by a separate security team. This significantly benefits both security and the product design. Built-in security, not security that functions as a perimeter around apps and data. O Experian Public Security is not the responsibility of just one specific team. Instead, everyone in the product development life cycle is responsible for security, in essence bringing Development and Operations together with Security functions. Supply Chain Environment Code Dev Build Governance Security is built in Sec Plan Policies & Data tables Test Release Ops Monitor experian Deploy Appendix Operate TM

View entire presentation