Lionsgate Studios Corp.

Risk Management and Strategy

We have implemented and maintain various information security processes designed to identify, assess and manage material risks arising from cybersecurity threats to our critical information systems, including computer networks, third-party hosted services, communications systems, hardware and software, and our sensitive data, including intellectual property, proprietary and confidential business information, and employee and other personal data (collectively, “Information Systems and Data”).

Our information security program is led by our Chief Information Security Officer (“CISO”) and supported by a dedicated information security team. The team is responsible for identifying, assessing and managing cybersecurity threats and risks by monitoring and evaluating our threat environment and evaluating the Company’s risk profile using a combination of automated and manual tools and processes. These include, among others, monitoring threat intelligence services, analyzing reports regarding threat actors and emerging risks, conducting vulnerability scans, audits and assessments, performing incident response and tabletop exercises, evaluating internally reported security events, and coordinating, as appropriate, with law enforcement and external specialists.

We maintain technical, physical, and organizational safeguards designed to mitigate material cybersecurity risks based on the nature of the relevant systems, environments and data. These measures include, among others, incident detection and response processes, vulnerability management, disaster recovery and business continuity planning, data encryption and segregation, network security and access controls, physical security measures, asset management and disposal procedures, system monitoring, vendor risk management processes, penetration testing, employee training and awareness programs, cybersecurity insurance, and dedicated cybersecurity personnel.

The assessment and management of material cybersecurity risks are integrated into the Company’s broader enterprise risk management framework. The CISO works closely with management, including the Chief Information Officer (“CIO”), to prioritize and address cybersecurity risks that could reasonably be expected to have a material impact to our business. Senior management evaluates material cybersecurity risks in the context of our overall business objectives and provides updates to the Audit & Risk Committee of our Board of Directors, which oversees enterprise-wide risk management.

Weengage third‑party service providers from time to time to assist with cybersecurity risk identification, assessment and mitigation, including cybersecurity consultants, managed security service providers, software and threat intelligence providers, penetration testing firms, dark web monitoring services, forensic investigators and professional services firms, including legal counsel.

We also rely on third‑party vendors to support various aspects of our business operations, including application, hosting, supply chain and data backup services. We maintain a vendor risk management program designed to address cybersecurity risks associated with these third‑party relationships. Depending on the nature of the services provided, the sensitivity of the Information Systems and Data involved and the risk profile of the vendor, this program may include risk assessments; review of vendors’ information security programs; evaluation of security questionnaires and assessment reports; audits and vulnerability scans for certain vendors; and the inclusion of contractual cybersecurity and data protection obligations.

For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1. Item 1A. “Risk Factors” in this Annual Report, including“Service disruptions, information security incidents or failures affecting Lionsgate or its third-party service providers could disrupt its operations, harm its reputation and adversely affect its business.”

Governance

Our Board of Directors oversees our cybersecurity risk management as part of its broader oversight responsibilities. The Audit & Risk Committee has primary responsibility for overseeing our cybersecurity risk management processes, including the identification, assessment and mitigation of risks arising from cybersecurity threats.

Management, including our CIO and CISO, is responsible for implementing and maintaining our cybersecurity risk assessment and management processes. The CISO is responsible for leading our cybersecurity program, including staffing and resourcing, integrating cybersecurity considerations into the Company’s overall risk management framework, and communicating cybersecurity priorities and risk information to relevant personnel. The CIO is responsible for approving cybersecurity budgets, overseeing preparedness for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and related reports.

We maintain cybersecurity incident response processes designed to escalate certain incidents to appropriate members of management based on the nature and severity of the event, including the CISO and CIO. The CISO, CIO and other senior executives work with the Company’s incident response team to coordinate mitigation, remediation and recovery efforts. In appropriate circumstances, these processes also provide for reporting cybersecurity incidents to the Audit & Risk Committee.

The Audit & Risk Committee receives regular updates from the CIO regarding significant cybersecurity risks, threats and trends, as well as the Company’s processes and controls for addressing those risks. The Audit & Risk Committee also receives periodic reports, summaries and presentations concerning cybersecurity risk management, incident response preparedness and mitigation efforts.