Information Security Breach and Cybersecurity Training Information

Breach Occurrence and Economic Impact:

EnerSys has not experienced a material information security breach within the last three years. The company has also not experienced a third-party information security breach.

There are no incurred material expenses related to information security breaches over the last three years to report.

There are no material expenses incurred from information security breach penalties and settlements over the last three years to report.

EnerSys maintains an information security risk insurance policy.

Information Security Training

EnerSys has a robust information security training program. All employees using EnerSys IT equipment, including those with access to potentially sensitive information are required to participate in the training and take refresher/ updated courses on a regular basis.

The titles/topics of the required information security training courses are:

• Defining Cybersecurity
• Passwords
• Protecting Your Mobile Device
• Cybersecurity While Travelling
• Malware
• Types of Malware
• Ransomware
• Email Phishing
• Identify Theft
• Your Responsibility
• Social Engineering
• Minimizing Insider Threats
• Protecting Your PC: Daily Precautions