Investor Presentaiton

Executive Summary Improving Financial Health Data Employees Social - Data Security - Three Lines of Defence 46 Supply Chain Environment Governance Policies & Data tables Appendix experian. We follow the Three Lines of Defence approach to risk management. Risks are owned and managed within the business and reviewed by our businesses at least quarterly. Global governance teams review risks and controls, including those relating to information security, compliance and business continuity. Global Internal Audit assesses our risks and controls independently and objectively. The results of these reviews feed into our quarterly reporting cycle, including through the risk management governance structure. Experian Public Board Audit Committee Executive management / Risk Management Committees First Line of Defence > Lines of business (regional and global) > Experian IT Services (EITS) > Corporate functions All employees have First Line responsibilities Second Line of Defence Third Line of Defence > Global Internal Audit > Global Risk Management > Global Security Office > Compliance > Business Continuity > Physical Security > Legal Governance teams have Second Line responsibilities Global Internal Audit has Third Line responsibilities

View entire presentation