Gen Digital Inc.

(a) Evaluation of Disclosure Controls and Procedures

The SEC defines the term “disclosure controls and procedures” to mean a company’s controls and other procedures that are designed, by management, to ensure that information required to be disclosed in the reports that it files or submits under the Exchange Act is recorded, processed, summarized, and reported, within the time periods specified in the SEC’s rules and forms. “Disclosure controls and procedures” include, without limitation, controls and procedures designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure. Our disclosure controls and procedures are designed to provide reasonable assurance that such information is accumulated and communicated to our management. Our management (with the participation of our Chief Executive Officer and Chief Financial Officer) evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act) as of the end of the period covered by this report.

Based on such evaluation, our Chief Executive Officer and our Chief Financial Officer have concluded that our disclosure controls and procedures were effective at the reasonable assurance level as of the end of the period covered by this report.

(b) Changes in Internal Control over Financial Reporting

There were no changes in Gen’s internal control over financial reporting or in other factors that occurred during the second quarter of fiscal 2027 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

(c) Limitations on Effectiveness of Controls

Our management, including our Chief Executive Officer and Chief Financial Officer, recognizes that disclosure controls and procedures and internal control over financial reporting can provide only reasonable assurance, not absolute assurance, that their objectives will be achieved. No control system, regardless of how well designed and operated, can prevent or detect all errors or fraud. The design of controls necessarily reflects resource constraints and requires management to balance the expected benefits of controls against their costs. In addition, the effectiveness of controls is based in part on management’s judgments and assumptions about future events and conditions, which may change over time. Accordingly, no evaluation of controls can provide absolute assurance that all control deficiencies or instances of fraud, if any, have been identified.