Victoria's Secret & Co.

Management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Securities Exchange Act of 1934. The Company’s internal control system is designed to provide reasonable assurance to the Company’s management and Board of Directors regarding the preparation and fair presentation of published financial statements. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of February 1, 2025. In making this assessment, management used the criteria established in Internal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework) (the “COSO criteria”).

Based on our assessment and the COSO criteria, management believes that the Company maintained effective internal control over financial reporting as of February 1, 2025.

The Company’s independent registered public accounting firm, Ernst & Young LLP, has issued an attestation report on the Company’s internal control over financial reporting. Ernst & Young LLP’s report appears on the following page and expresses an unqualified opinion on the effectiveness of the Company’s internal control over financial reporting as of February 1, 2025.