Investor Presentaiton

Executive Summary Improving Financial Health Data Employees Supply Chain Environment Governance Policies & Data tables Appendix Social - Data Security overview 1. Cyber is one of the top risks to the company and is central to protecting our business strategy. 2. Staying ahead of cyber threats and protect our data can only be accomplished by continuously advancing our cybersecurity capabilities. Experian is threat-focused so that it can respond to the ever-changing cyber landscape and be sustainable for the long-term. 3. Strong governance - bi-monthly executive reviews by Security and Continuity Steering Committee (SCSC) - CEO, CFO, COO, CIO, CISO and CRO 4. Culture of security with mandatory annual training for all employees, more frequent training for employees working with data 5. We have a multi-tiered approach to security: • . . Prevention - stopping Threat actors from entering the estate Detection – knowing if a Threat actor has entered the estate Mitigation minimising a Threat actor's ability to extract anything of value if they do enter the estate 6. Cyber Fusion Centre (CFC) coverage with 'follow the sun' capabilities, based in the US, UK and Malaysia. Combines threat intelligence, incident response, threat detection, security automation and threat hunting. 7. DevSecOps builds security into the design of the product during the development phase HIPAA PCI DSS COMPLIANT 8. Robust security controls based on NIST frameworks 40 Experian Public ISO experian Healt lesurance Porobility Accounity Act ISONEC 27001:2013 CYBER ESSENTIALS PA Service O Organization Controf AICPA trol Reports SOC 2 Formerly SAS 70 Reports CERTIFIED PLUS

View entire presentation