ENTRAVISION COMMUNICATIONS CORP

Cybersecurity Risk Management and Strategy. We recognize the critical role that cybersecurity plays in protecting our operations, customers, and digital assets. As part of our broader technology and information security risk management framework, our cybersecurity strategy is designed to safeguard the confidentiality, integrity and availability of our systems and data. We continuously assess, strengthen and refine our cybersecurity practices to adapt to an evolving threat landscape.

Over the past year, we enhanced security across personnel, processes, technology, and third-party partners. The employee training program includes instruction on AI risks and usage. We increased visibility into hardware and software inventory to monitor infrastructure. We updated authentication procedures and deployed safeguards for company devices. We are implementing data loss prevention measures, beginning with email communications. We identify and remediate security vulnerabilities and require vendors to meet security standards.

A core component of our security framework is our threat detection and response capability. We have implemented an extended detection and response system that provides continuous monitoring, real-time threat detection and automated response mechanisms to mitigate cybersecurity risks. Our governance, risk and compliance initiatives have also advanced, with ongoing efforts to standardize security policies and align with regulatory and industry standards. Penetration testing is conducted to assess our security posture and identify potential vulnerabilities, ensuring that our defenses remain resilient against emerging threats.

Understanding the risks posed by external partners, we have strengthened our third-party risk management program. This initiative focuses on evaluating and monitoring the cybersecurity practices of our vendors, service providers, and business partners to mitigate potential supply chain risks. Additionally, our incident response plan has been enhanced to support swift detection, containment, and remediation of cybersecurity incidents, ensuring operational continuity and minimal disruption with the addition of an incident response retainer.

As of the date of this report, we havenot identified any cybersecurity threats, including any past cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, financial condition, or results of operations. We continue to monitor cybersecurity risks closely and remain committed to taking proactive measures to address evolving threats.

Cybersecurity Governance. We have established a cybersecurity governance framework to ensure effective oversight, accountability, and strategic alignment across the organization. The Audit Committee of our Board of Directors oversees cybersecurity-related risks as part of its broader risk management responsibilities. The Audit Committee of the Board of Directors receives periodic reports from executive management and external cybersecurity advisors on our security initiatives, emerging threats and risk mitigation efforts.

Day-to-day management of our cybersecurity program is led by our Chief Information Officer, who is responsible for overseeing information security policies, threat mitigation strategies, and compliance initiatives. The CIO provides periodic updates to management and the Audit Committee of the Board of Directors, ensuring that cybersecurity remains a key focus of our risk management framework. Our incident response protocols are structured to provide clear escalation pathways for cybersecurity incidents, ensuring that appropriate leadership is engaged in a timely manner to coordinate an effective response.

We also maintain stringent security requirements for third-party service providers, ensuring that vendors comply with our cybersecurity policies and controls. Our third-party risk management program includes due diligence assessments prior to engagement and ongoing security evaluations to mitigate external risks that could impact our operations.

As cybersecurity threats continue to evolve, we remain committed to strengthening our cybersecurity governance model, enhancing transparency and implementing best-in-class security measures. Our approach reflects a proactive commitment to protecting our digital infrastructure, ensuring business continuity and upholding the trust of our stakeholders.